last executing test programs: 7m42.728790552s ago: executing program 32 (id=5294): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)="1add"}) 4m43.404394315s ago: executing program 33 (id=7418): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x4000078, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4m7.681915604s ago: executing program 34 (id=7821): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x4800) 4m4.884925401s ago: executing program 6 (id=7852): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 4m3.718938414s ago: executing program 6 (id=7857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 4m2.62902805s ago: executing program 6 (id=7862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) 4m0.051247364s ago: executing program 6 (id=7872): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m58.973258456s ago: executing program 6 (id=7881): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m58.61664174s ago: executing program 6 (id=7884): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m58.180442317s ago: executing program 35 (id=7884): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m44.019025334s ago: executing program 5 (id=8587): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) 2m43.883352987s ago: executing program 5 (id=8589): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20009054}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m43.72267239s ago: executing program 5 (id=8591): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0x60, 0x18}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m41.169172684s ago: executing program 5 (id=8614): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(r0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x220) 2m40.897160398s ago: executing program 5 (id=8617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x44000732) write$binfmt_elf64(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000003003e00ecffffff980300000000000040000000000000005600000000000000000000000000380005"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2m40.621908731s ago: executing program 5 (id=8620): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 2m39.902941503s ago: executing program 36 (id=8620): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 1m26.589908501s ago: executing program 8 (id=9327): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x20, 0x20, 0x8, 0xa, 0x106c, 0x5, 0x8000000000000, 0x2, 0xfffffffffffffffe, 0x6, 0x3, 0x4, 0x100000000, 0x8001], 0xeeee0000, 0x3c4210}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r0], 0x20) 1m26.400575492s ago: executing program 8 (id=9328): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) 1m26.204650293s ago: executing program 8 (id=9330): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m26.102681186s ago: executing program 8 (id=9333): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x126) 1m25.101331083s ago: executing program 8 (id=9342): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 1m24.247418853s ago: executing program 1 (id=9347): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 1m23.633438709s ago: executing program 1 (id=9352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "ba287455a8d1a0d7", "b9628b3aba5f13b642fcd224cf4ddbcd", "b5a8b9bd", "5f403955b4b56725"}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m23.472250995s ago: executing program 1 (id=9353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x3a, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x1d, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m23.246214225s ago: executing program 8 (id=9354): r0 = socket(0xa, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2185) fcntl$setstatus(r2, 0x4, 0x102800) close_range(r0, 0xffffffffffffffff, 0x0) 1m22.717405935s ago: executing program 37 (id=9354): r0 = socket(0xa, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2185) fcntl$setstatus(r2, 0x4, 0x102800) close_range(r0, 0xffffffffffffffff, 0x0) 1m22.704420984s ago: executing program 1 (id=9358): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x214) 1m21.749418557s ago: executing program 1 (id=9366): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x1, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r2, 0x0) 1m18.648253238s ago: executing program 1 (id=9378): io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0xa21a, 0x7721, 0x1a, 0x0, 0x0) 1m18.238234992s ago: executing program 38 (id=9378): io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0xa21a, 0x7721, 0x1a, 0x0, 0x0) 30.635152715s ago: executing program 0 (id=9800): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x7, 0x100000000, 0x100000000000000, 0x1, 0xfdb1, 0xc, 0x288100000400000b, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 29.370107993s ago: executing program 0 (id=9817): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_io_uring_setup(0x6b0c, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000280)={0x1, 0x1, 0x1, 0x1, 0xfffffff7, 0x3}) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 26.309717795s ago: executing program 0 (id=9842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xf000, 0x10000, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.905001787s ago: executing program 0 (id=9848): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 25.721437454s ago: executing program 0 (id=9850): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x39, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x300, 0x170bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {0xe, 0x1}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2008001}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 24.946020151s ago: executing program 0 (id=9853): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) 24.371615589s ago: executing program 39 (id=9853): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) 3.953657285s ago: executing program 3 (id=10037): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.849260754s ago: executing program 7 (id=10038): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) 3.688661192s ago: executing program 7 (id=10039): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010102, 0x4e25, 0x0, 'sed\x00', 0x3e, 0x3, 0x1e}, 0x2c) 3.498102081s ago: executing program 7 (id=10041): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0xffffffffffffff0d, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x401}], 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.364669766s ago: executing program 9 (id=10043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec8ec02d1aa80000460f1c460041ae", 0x47}], 0xaaaaaaaaaaaaaaf, 0x7d, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.251381764s ago: executing program 3 (id=10044): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d00010027bd7000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0200d0070a00"], 0x28}, 0x1, 0x0, 0x0, 0x20040100}, 0x800) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.89717891s ago: executing program 4 (id=10045): socket$kcm(0x2b, 0x1, 0x0) socket(0x10, 0x3, 0x0) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 2.896552279s ago: executing program 2 (id=10046): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') 2.576767273s ago: executing program 4 (id=10047): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.546163579s ago: executing program 2 (id=10048): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x1, 0x0, 0x6, 0x4006}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x2, 0x802, 0xfffffffffffffffd}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.368603153s ago: executing program 7 (id=10049): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1) 2.266575986s ago: executing program 4 (id=10050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0xe000, 0x3, 0x8, 0x3, 0x0, [{0x7, 0x1, 0x7, '\x00', 0xe}, {0x9, 0x2, 0xa, '\x00', 0xff}, {0x6, 0x52, 0x3, '\x00', 0x2}, {0x70, 0x9, 0xf7, '\x00', 0x98}, {0x0, 0x3, 0x2, '\x00', 0x4}, {0x8, 0x5, 0x7, '\x00', 0x5}, {0x3, 0x6, 0x1, '\x00', 0xa}, {0xf0, 0x3c, 0x2, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x60}, {0x5, 0xbb, 0xd1, '\x00', 0x5}, {0x3, 0xc, 0xf8, '\x00', 0x40}, {0x5, 0xf, 0x9}, {0x78, 0x9, 0x2, '\x00', 0xb}, {0x9, 0xc3, 0x2, '\x00', 0x5}, {0x0, 0x2, 0x2, '\x00', 0xf7}, {0x7, 0x2, 0x2, '\x00', 0x1}, {0x7f, 0x0, 0x1, '\x00', 0x1e}, {0x2, 0xff, 0x1, '\x00', 0xb}, {0x8, 0x10, 0x5, '\x00', 0x66}, {0x9, 0x0, 0x2, '\x00', 0x9}, {0x2, 0x9, 0x4, '\x00', 0x8}, {0x4, 0x1, 0xc6, '\x00', 0x6}, {0x5, 0x2, 0x2, '\x00', 0xae}, {0x8, 0x9, 0x1, '\x00', 0x7}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x1, 0xc, 0xc, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x100000021, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x800000000000, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x8004], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.244850721s ago: executing program 9 (id=10051): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3d, &(0x7f00000001c0)=0xf, 0x4) 2.230677247s ago: executing program 3 (id=10052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.980031792s ago: executing program 4 (id=10053): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x35ced141}}, 0xe4) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.805930511s ago: executing program 3 (id=10054): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4c000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) 1.737171593s ago: executing program 4 (id=10055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000441) 1.397618252s ago: executing program 3 (id=10056): r0 = socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept$inet(r0, 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 1.339513006s ago: executing program 2 (id=10057): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x2, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x7}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1.125852145s ago: executing program 9 (id=10058): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x41081}, 0x200480c5) 980.628102ms ago: executing program 7 (id=10059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6, 0x0, 0x3, 0x400, 0x400}}}}]}, 0x4c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 959.799959ms ago: executing program 4 (id=10060): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r3, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 527.687772ms ago: executing program 7 (id=10062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec8ec02d1aa80000460f1c460041ae", 0x47}], 0xaaaaaaaaaaaaaaf, 0x7d, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 524.833036ms ago: executing program 2 (id=10072): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x79f, 0x1) io_uring_setup(0x664b, &(0x7f0000000500)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 229.249632ms ago: executing program 2 (id=10063): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @local, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0x4}, 0x8) 228.982362ms ago: executing program 9 (id=10064): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x2) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 147.546905ms ago: executing program 3 (id=10065): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x40d0}, 0x1404cc09) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 5.774077ms ago: executing program 9 (id=10066): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf251000000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) 0s ago: executing program 2 (id=10067): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 9153][T26991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.736057][T26991] veth0_vlan: entered promiscuous mode [ 781.757118][T27186] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8739'. [ 781.766900][T26991] veth1_vlan: entered promiscuous mode [ 781.858067][T26991] veth0_macvtap: entered promiscuous mode [ 781.888867][T26991] veth1_macvtap: entered promiscuous mode [ 781.930515][T17502] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 781.947666][T26991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.958689][T17502] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 781.997399][T17502] aqc111 9-1:1.105 eth21: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b4:17:dc:b1:bf:b1 [ 782.007129][T26991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.037838][T17502] usb 9-1: USB disconnect, device number 9 [ 782.056985][T17502] aqc111 9-1:1.105 eth21: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 782.074267][T19873] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.094607][T19873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.146630][T19873] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.149665][T17503] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 782.175118][T19873] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.191087][T17502] aqc111 9-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 782.221493][T17502] aqc111 9-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 782.278420][T17502] aqc111 9-1:1.105 eth21 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 782.311082][T17503] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 782.335666][T17503] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 782.375985][T17503] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 782.387294][T19867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.402188][T19867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.414373][T17503] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 782.434809][T17503] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 782.465796][T17503] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 782.478930][T17503] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 782.497252][T19863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.514204][T17503] usb 10-1: Product: syz [ 782.518730][T19863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.530747][T17503] usb 10-1: Manufacturer: syz [ 782.550775][T17503] cdc_wdm 10-1:1.0: skipping garbage [ 782.569014][T17503] cdc_wdm 10-1:1.0: skipping garbage [ 782.603399][T17503] cdc_wdm 10-1:1.0: cdc-wdm2: USB WDM device [ 782.613909][T17503] cdc_wdm 10-1:1.0: Unknown control protocol [ 782.980132][ T5148] Bluetooth: hci4: command tx timeout [ 783.020608][T14108] usb 2-1: USB disconnect, device number 110 [ 783.318713][T17503] usb 4-1: USB disconnect, device number 101 [ 783.378962][T17503] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 783.834254][T17503] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 783.890071][T17503] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 784.009612][T27246] input: syz0 as /devices/virtual/input/input123 [ 784.509554][T27265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8762'. [ 784.887623][T17503] usb 10-1: USB disconnect, device number 5 [ 785.524439][T14108] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 785.681718][T14108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.704668][T14108] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 785.723725][T14108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.735274][T14108] usb 4-1: config 0 descriptor?? [ 785.970464][T14108] usbhid 4-1:0.0: can't add hid device: -71 [ 785.998556][T14108] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 786.036565][T14108] usb 4-1: USB disconnect, device number 102 [ 786.249496][T17502] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 786.369645][T17505] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 786.441411][T17502] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 786.450435][T17502] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.460941][T17502] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 786.470215][T17502] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.483561][T17502] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 786.492525][T14108] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 786.493860][T17502] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 786.508745][T17502] usb 2-1: Product: syz [ 786.513492][T17502] usb 2-1: Manufacturer: syz [ 786.524778][T17502] cdc_wdm 2-1:1.0: skipping garbage [ 786.533511][T17502] cdc_wdm 2-1:1.0: skipping garbage [ 786.541505][T17505] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 786.552926][T17502] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 786.558856][T17502] cdc_wdm 2-1:1.0: Unknown control protocol [ 786.564951][T17505] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.578065][T17505] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 786.590732][T17505] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.606399][T17505] usb 9-1: config 0 descriptor?? [ 786.651215][T14108] usb 4-1: Using ep0 maxpacket: 16 [ 786.660417][T14108] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.671824][T14108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 786.679712][T14108] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 786.689034][T14108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.701115][T14108] usb 4-1: config 0 descriptor?? [ 786.938679][T27321] netlink: 'syz.9.8786': attribute type 1 has an invalid length. [ 787.000340][ T5900] usb 2-1: USB disconnect, device number 111 [ 787.040504][T17505] elan 0003:04F3:0755.0083: unknown main item tag 0x0 [ 787.047379][T17505] elan 0003:04F3:0755.0083: unknown main item tag 0x0 [ 787.063947][T17505] elan 0003:04F3:0755.0083: unknown main item tag 0x0 [ 787.074005][T17505] elan 0003:04F3:0755.0083: unknown main item tag 0x0 [ 787.081306][T17505] elan 0003:04F3:0755.0083: unknown main item tag 0x0 [ 787.093685][T17505] elan 0003:04F3:0755.0083: failed to start in urb: -90 [ 787.107192][T17505] elan 0003:04F3:0755.0083: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 787.126692][T14108] mcp2221 0003:04D8:00DD.0084: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 787.261024][T14108] usb 9-1: USB disconnect, device number 10 [ 787.525382][T17502] usb 4-1: USB disconnect, device number 103 [ 787.877554][T27340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.944130][T17505] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 788.123514][T17505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 788.153472][T17505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.163742][T17505] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 788.175528][T17505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.196568][T17505] usb 2-1: config 0 descriptor?? [ 788.340180][T14108] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 788.501417][T14108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 788.515195][T14108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 788.528525][T14108] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.542356][ T5900] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 788.556804][T14108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 788.566919][T14108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 788.575919][T14108] usb 4-1: Product: syz [ 788.581380][T14108] usb 4-1: Manufacturer: syz [ 788.586023][T14108] usb 4-1: SerialNumber: syz [ 788.649155][T17505] elan 0003:04F3:0755.0085: unknown main item tag 0x0 [ 788.656153][T17505] elan 0003:04F3:0755.0085: unknown main item tag 0x0 [ 788.679439][T17505] elan 0003:04F3:0755.0085: unknown main item tag 0x0 [ 788.686288][T17505] elan 0003:04F3:0755.0085: unknown main item tag 0x0 [ 788.711474][T17505] elan 0003:04F3:0755.0085: unknown main item tag 0x0 [ 788.719604][T17505] elan 0003:04F3:0755.0085: failed to start in urb: -90 [ 788.742406][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.759871][T17505] elan 0003:04F3:0755.0085: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 788.771232][ T5900] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.812330][ T5900] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 788.830735][ T5900] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 788.842469][ T5900] usb 10-1: Manufacturer: syz [ 788.848003][T14108] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 788.878748][ T1220] usb 2-1: USB disconnect, device number 112 [ 788.886527][ T5900] usb 10-1: config 0 descriptor?? [ 789.006067][T27366] fido_id[27366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 789.391219][T27371] binder: 27370:27371 ioctl c0306201 200000001a80 returned -14 [ 789.577107][T17505] usb 4-1: USB disconnect, device number 104 [ 789.610470][T17505] usblp0: removed [ 789.953611][ T5900] uclogic 0003:256C:006D.0086: v1 frame probing failed: -71 [ 789.986301][ T5900] uclogic 0003:256C:006D.0086: failed probing parameters: -71 [ 790.019479][ T5900] uclogic 0003:256C:006D.0086: probe with driver uclogic failed with error -71 [ 790.079341][ T5900] usb 10-1: USB disconnect, device number 6 [ 790.820662][T27391] netlink: 'syz.3.8815': attribute type 4 has an invalid length. [ 790.828539][T27391] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8815'. [ 791.199862][T17504] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 791.399448][T17504] usb 10-1: Using ep0 maxpacket: 8 [ 791.414230][T17504] usb 10-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 791.439618][T17504] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 791.468422][T17504] usb 10-1: Product: syz [ 791.502525][T17504] usb 10-1: Manufacturer: syz [ 791.507289][T17504] usb 10-1: SerialNumber: syz [ 791.526181][T17504] usb 10-1: config 0 descriptor?? [ 791.548552][T17504] usbtest 10-1:0.0: FX2 device [ 791.569737][T17504] usbtest 10-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 791.769384][T17505] usb 10-1: USB disconnect, device number 7 [ 791.785214][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 791.785234][ T29] audit: type=1326 audit(1775756495.947:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27440 comm="syz.1.8832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce1219c819 code=0x0 [ 792.059608][T14108] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 792.221160][T14108] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 792.252371][T14108] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 792.270260][T14108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.278319][T14108] usb 9-1: Product: syz [ 792.293198][T14108] usb 9-1: Manufacturer: syz [ 792.297835][T14108] usb 9-1: SerialNumber: syz [ 792.328795][T14108] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 792.471672][T27455] input: syz1 as /devices/virtual/input/input124 [ 792.699665][ T1220] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 792.780749][T14108] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 792.834997][T14108] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 792.875138][T14108] usb 9-1: media controller created [ 792.891124][ T1220] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.937361][ T1220] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 792.970533][T14108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 792.982041][ T1220] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 793.027692][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 793.060529][ T1220] usb 4-1: SerialNumber: syz [ 793.297574][ T1220] usb 4-1: 0:2 : does not exist [ 793.399371][ T5900] usb 9-1: USB disconnect, device number 11 [ 793.463552][ T1220] usb 4-1: USB disconnect, device number 105 [ 794.209092][T27508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.226074][T27508] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 794.448759][T27521] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 794.512846][T27524] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.8857'. [ 794.539469][T27524] netlink: Conntrack attr has 3 unknown bytes [ 794.627002][T27532] loop5: detected capacity change from 0 to 7 [ 794.640333][T27532] Dev loop5: unable to read RDB block 7 [ 794.657236][T27532] loop5: unable to read partition table [ 794.683982][T27532] loop5: partition table beyond EOD, truncated [ 794.705760][T27532] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 795.026719][T27549] veth0_to_team: entered promiscuous mode [ 795.889545][T17504] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 796.049431][T17504] usb 4-1: Using ep0 maxpacket: 8 [ 796.056555][T17504] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 796.065175][T17504] usb 4-1: config 179 has no interface number 0 [ 796.071557][T17504] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 796.084032][T17504] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 796.109352][T17504] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 796.122550][T17504] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 796.135380][T17504] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 796.165444][T17504] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 796.182712][T17504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.208097][T27576] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 796.550676][T17504] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input125 [ 796.809015][T17504] usb 4-1: USB disconnect, device number 106 [ 796.809100][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 796.823515][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 797.013195][T27612] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8893'. [ 797.024562][T27612] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8893'. [ 797.919611][T27647] input: syz1 as /devices/virtual/input/input126 [ 798.016541][T27649] sg_read: process 3948 (syz.3.8904) changed security contexts after opening file descriptor, this is not allowed. [ 798.807666][T27688] bridge_slave_0: left allmulticast mode [ 798.819019][T27688] bridge_slave_0: left promiscuous mode [ 798.825146][T27688] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.873751][T27688] bridge_slave_1: left allmulticast mode [ 798.883317][T27688] bridge_slave_1: left promiscuous mode [ 798.890634][T27688] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.945167][T27688] bond0: (slave bond_slave_0): Releasing backup interface [ 798.980286][T27688] bond0: (slave bond_slave_1): Releasing backup interface [ 799.013041][T27688] team0: Port device team_slave_0 removed [ 799.045749][T27688] team0: Port device team_slave_1 removed [ 799.060529][T27688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.078048][T27688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.091096][T27688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.099069][T27688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.125813][T27688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 799.169736][T14108] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 799.329376][T14108] usb 9-1: Using ep0 maxpacket: 32 [ 799.345163][T14108] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 799.396012][T14108] usb 9-1: config 0 has no interface number 0 [ 799.439764][T14108] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 799.497078][T14108] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 799.529246][T14108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.537334][T14108] usb 9-1: Product: syz [ 799.579390][T14108] usb 9-1: Manufacturer: syz [ 799.584591][T14108] usb 9-1: SerialNumber: syz [ 799.620662][T14108] usb 9-1: config 0 descriptor?? [ 799.628273][T27693] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 799.852062][T27693] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 801.082743][T14108] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 801.095483][T14108] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 801.121227][T14108] asix 9-1:0.188: probe with driver asix failed with error -71 [ 801.134821][T14108] usb 9-1: USB disconnect, device number 12 [ 801.826968][T27761] syzkaller1: entered promiscuous mode [ 801.839749][T27761] syzkaller1: entered allmulticast mode [ 801.923102][T27764] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1692678547 (1692678547 ns) > initial count (310440980 ns). Using initial count to start timer. [ 802.101507][T27769] veth0: entered promiscuous mode [ 802.115110][T27769] bond0: entered promiscuous mode [ 802.131313][T27769] bond_slave_0: entered promiscuous mode [ 802.150537][T27769] bond_slave_1: entered promiscuous mode [ 802.170648][T27769] bridge0: entered promiscuous mode [ 802.180208][T27768] bond0: left promiscuous mode [ 802.185037][T27768] bond_slave_0: left promiscuous mode [ 802.219601][T27768] bond_slave_1: left promiscuous mode [ 802.225295][T27768] bridge0: left promiscuous mode [ 802.267462][T27768] veth0: left promiscuous mode [ 802.499564][T17504] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 802.522224][T17505] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 802.659536][T17504] usb 4-1: Using ep0 maxpacket: 8 [ 802.668826][T17504] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 802.678957][T17504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.687370][T17505] usb 10-1: Using ep0 maxpacket: 32 [ 802.693695][T17504] usb 4-1: Product: syz [ 802.698720][T17504] usb 4-1: Manufacturer: syz [ 802.704292][T17504] usb 4-1: SerialNumber: syz [ 802.709095][T17505] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.721484][T17505] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.735453][T17504] usb 4-1: config 0 descriptor?? [ 802.751331][T17504] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 802.758351][T17505] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 802.770263][T17505] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.795645][T17505] usb 10-1: config 0 descriptor?? [ 802.808041][T17505] hub 10-1:0.0: USB hub found [ 803.021663][T17505] hub 10-1:0.0: 1 port detected [ 803.589729][ T5900] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 803.638308][T17505] hub 10-1:0.0: activate --> -90 [ 803.716314][T27807] input: syz0 as /devices/virtual/input/input127 [ 803.760061][ T5900] usb 9-1: Using ep0 maxpacket: 16 [ 803.783307][ T5900] usb 9-1: config 0 has no interfaces? [ 803.803136][ T5900] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 803.812576][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.821892][ T5900] usb 9-1: Product: syz [ 803.826317][ T5900] usb 9-1: Manufacturer: syz [ 803.831506][ T5900] usb 9-1: SerialNumber: syz [ 803.841629][T14108] usb 10-1: USB disconnect, device number 8 [ 803.841686][T17505] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 803.851421][ T5900] usb 9-1: config 0 descriptor?? [ 803.963471][T17504] input: sonixj as /devices/platform/dummy_hcd.3/usb4/4-1/input/input128 [ 804.106465][T17505] usb 9-1: USB disconnect, device number 13 [ 804.183124][T14108] usb 4-1: USB disconnect, device number 107 [ 804.202480][T27816] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8970'. [ 804.559335][T17505] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 804.711057][T17505] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 804.726289][T17505] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 804.746765][T17505] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.770526][T17505] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 804.782603][T17505] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 804.814697][T17505] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 804.823132][T17505] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 804.847928][T17505] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.862242][T17505] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 804.918391][T17505] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 804.931889][T27198] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 804.945311][T17505] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 804.958696][T17505] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 804.973471][T17505] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.986131][T17505] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 804.999252][T17505] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 805.023912][T17505] usb 2-1: string descriptor 0 read error: -22 [ 805.031120][T17505] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 805.047357][T17505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.081758][T17505] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 805.089497][T27198] usb 9-1: Using ep0 maxpacket: 8 [ 805.101675][T27198] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 805.118248][T27198] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 805.146375][T27198] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.160153][T27198] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 805.172337][T27198] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.196848][T27198] usbtmc 9-1:16.0: bulk endpoints not found [ 805.418868][T27198] usb 9-1: USB disconnect, device number 14 [ 805.639909][T27827] veth0: entered promiscuous mode [ 805.678778][T27827] veth0: left promiscuous mode [ 806.572637][T27870] netlink: 'syz.7.8990': attribute type 1 has an invalid length. [ 806.685753][T27876] ipip0: entered promiscuous mode [ 806.692232][T27876] ipip0: entered allmulticast mode [ 806.711516][T27872] fuse: root generation should be zero [ 806.918429][T27885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.639699][T14108] usb 2-1: USB disconnect, device number 113 [ 808.745971][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.752478][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.228593][T28006] netlink: 'syz.8.9044': attribute type 9 has an invalid length. [ 810.239703][T28006] netlink: 'syz.8.9044': attribute type 11 has an invalid length. [ 810.247776][T28006] netlink: 'syz.8.9044': attribute type 12 has an invalid length. [ 810.257340][T28006] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.9044'. [ 810.267323][T28006] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9044'. [ 810.773737][T28033] netdevsim netdevsim1 netdevsim0: Device is already in use. [ 811.471036][T28049] [U] [ 811.474647][T28049] [U] [ 811.477399][T28049] [U] [ 811.480148][T28049] [U] [ 811.508826][T28049] [U] [ 811.511625][T28049] [U] [ 811.514374][T28049] [U] [ 811.517112][T28049] [U] [ 811.536609][T28049] [U] [ 811.539389][T28049] [U] [ 811.542124][T28049] [U] [ 811.576667][T28045] [U] [ 811.686614][T28055] loop5: detected capacity change from 0 to 7 [ 811.704535][T28055] Dev loop5: unable to read RDB block 7 [ 811.721909][T28055] loop5: AHDI p1 p2 p3 [ 811.729571][T28055] loop5: partition table partially beyond EOD, truncated [ 811.745698][T28055] loop5: p1 start 1818582900 is beyond EOD, truncated [ 811.761154][T28055] loop5: p3 start 335544320 is beyond EOD, truncated [ 812.396809][ T29] audit: type=1800 audit(1775756516.557:919): pid=28074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9070" name="file1" dev="tmpfs" ino=9334 res=0 errno=0 [ 813.319863][T28096] syzkaller1: entered promiscuous mode [ 813.325410][T28096] syzkaller1: entered allmulticast mode [ 813.675257][T28102] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9082'. [ 814.484414][T28125] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9090'. [ 814.814753][T28140] FAULT_FLAG_ALLOW_RETRY missing 801 [ 814.841583][T28140] CPU: 0 UID: 0 PID: 28140 Comm: syz.8.9097 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.841629][T28140] Tainted: [L]=SOFTLOCKUP [ 814.841638][T28140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 814.841653][T28140] Call Trace: [ 814.841663][T28140] [ 814.841673][T28140] dump_stack_lvl+0xe8/0x150 [ 814.841711][T28140] handle_userfault+0x1532/0x17f0 [ 814.841760][T28140] ? __pfx___folio_put+0x10/0x10 [ 814.841792][T28140] ? __pfx_handle_userfault+0x10/0x10 [ 814.841854][T28140] handle_mm_fault+0x1bec/0x3310 [ 814.841905][T28140] ? handle_mm_fault+0xee/0x3310 [ 814.841949][T28140] ? __pfx_handle_mm_fault+0x10/0x10 [ 814.841986][T28140] ? follow_page_pte+0x841/0x1450 [ 814.842018][T28140] ? __pfx_follow_page_pte+0x10/0x10 [ 814.842051][T28140] __get_user_pages+0x165b/0x29d0 [ 814.842118][T28140] populate_vma_page_range+0x2be/0x3c0 [ 814.842163][T28140] ? __pfx_populate_vma_page_range+0x10/0x10 [ 814.842195][T28140] ? vma_wants_writenotify+0xb3/0x2a0 [ 814.842235][T28140] ? vma_set_page_prot+0xc3/0x100 [ 814.842274][T28140] mprotect_fixup+0x893/0xa80 [ 814.842312][T28140] ? __pfx_mprotect_fixup+0x10/0x10 [ 814.842345][T28140] ? apparmor_file_mprotect+0x1d0/0x400 [ 814.842375][T28140] ? security_file_mprotect+0x1a/0x290 [ 814.842413][T28140] do_mprotect_pkey+0x8ab/0xcd0 [ 814.842457][T28140] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 814.842501][T28140] ? __se_sys_futex+0x3a8/0x450 [ 814.842539][T28140] ? rcu_is_watching+0x15/0xb0 [ 814.842581][T28140] __x64_sys_mprotect+0x80/0x90 [ 814.842619][T28140] do_syscall_64+0x14d/0xf80 [ 814.842651][T28140] ? trace_irq_disable+0x3b/0x150 [ 814.842671][T28140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.842696][T28140] ? clear_bhb_loop+0x40/0x90 [ 814.842724][T28140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.842747][T28140] RIP: 0033:0x7f7f02b9c819 [ 814.842769][T28140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.842788][T28140] RSP: 002b:00007f7f039f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 814.842813][T28140] RAX: ffffffffffffffda RBX: 00007f7f02e15fa0 RCX: 00007f7f02b9c819 [ 814.842828][T28140] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 814.842844][T28140] RBP: 00007f7f02c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 814.842859][T28140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.842872][T28140] R13: 00007f7f02e16038 R14: 00007f7f02e15fa0 R15: 00007f7f02f3fa48 [ 814.842908][T28140] [ 815.479389][T28151] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9103'. [ 815.519411][ T5900] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 815.688383][ T5900] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 815.720112][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.740644][ T5900] usb 9-1: Product: syz [ 815.744965][ T5900] usb 9-1: Manufacturer: syz [ 815.770936][ T5900] usb 9-1: SerialNumber: syz [ 815.797141][ T5900] usb 9-1: config 0 descriptor?? [ 815.995697][T14111] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 816.021225][ T5900] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 816.199260][T14111] usb 2-1: Using ep0 maxpacket: 32 [ 816.224520][T28170] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.9110'. [ 816.236735][T14111] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 816.278349][T14111] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 816.309084][T14111] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 816.319032][T14111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 816.360413][T14111] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 816.420109][T14111] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 816.479364][T14111] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 816.488549][T14111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.574710][T14111] usb 2-1: config 0 descriptor?? [ 816.796013][T28179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9114'. [ 816.816553][T28179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9114'. [ 816.856114][T14111] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 816.912266][T14111] usb 2-1: USB disconnect, device number 114 [ 816.962400][T14111] usblp0: removed [ 817.072906][ T5900] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 817.110869][ T5900] usb 9-1: USB disconnect, device number 15 [ 817.279288][T14108] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 817.419483][T14111] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 817.439285][T14108] usb 4-1: Using ep0 maxpacket: 32 [ 817.458229][T14108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.484455][T14108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.506558][T14108] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 817.528293][T14108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.551352][T14108] usb 4-1: config 0 descriptor?? [ 817.583851][T14108] hub 4-1:0.0: USB hub found [ 817.589282][T14111] usb 2-1: Using ep0 maxpacket: 32 [ 817.604610][T14111] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 817.619298][T14111] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 817.647050][T14111] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 817.666602][T14111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 817.735043][T14111] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 817.768362][T14111] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 817.822135][T14111] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 817.836570][T14108] hub 4-1:0.0: 1 port detected [ 817.869456][T14111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.909018][T14111] usb 2-1: config 0 descriptor?? [ 818.133840][T14111] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 115 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 818.473137][T14108] hub 4-1:0.0: activate --> -90 [ 818.742646][T17505] usb 2-1: USB disconnect, device number 115 [ 818.771247][T17505] usblp0: removed [ 818.871602][T14111] usb 4-1: USB disconnect, device number 108 [ 819.041620][T28217] netlink: 'syz.8.9129': attribute type 4 has an invalid length. [ 819.686692][T28214] loop6: detected capacity change from 0 to 2640 [ 819.720604][T28214] buffer_io_error: 6 callbacks suppressed [ 819.720624][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.766055][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.804749][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.830184][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.858710][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.887012][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.909394][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.944164][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 819.966167][T28214] ldm_validate_partition_table(): Disk read failed. [ 819.984227][T28236] io-wq is not configured for unbound workers [ 819.985077][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9138'. [ 820.000628][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 820.019408][T28214] Buffer I/O error on dev loop6, logical block 0, async page read [ 820.027525][T28214] Dev loop6: unable to read RDB block 0 [ 820.047912][T28214] loop6: unable to read partition table [ 820.069979][T28214] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 820.942121][T28263] netlink: 'syz.8.9146': attribute type 1 has an invalid length. [ 820.991223][T28263] netlink: 'syz.8.9146': attribute type 1 has an invalid length. [ 821.374118][T28280] netlink: 148 bytes leftover after parsing attributes in process `syz.9.9154'. [ 821.499913][ T5843] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 821.672701][ T5843] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 821.722268][ T5843] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 821.761775][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 821.791639][ T5843] usb 9-1: Product: syz [ 821.809220][ T5843] usb 9-1: Manufacturer: syz [ 821.826304][ T5843] usb 9-1: SerialNumber: syz [ 822.087763][ T5843] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 822.163038][T28294] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9159'. [ 822.176748][T28294] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9159'. [ 822.456927][T28303] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.9164'. [ 823.365694][T28318] loop5: detected capacity change from 0 to 2640 [ 823.375993][T28318] ldm_validate_partition_table(): Disk read failed. [ 823.399548][T28318] Dev loop5: unable to read RDB block 0 [ 823.405436][T28318] loop5: unable to read partition table [ 823.419736][T28318] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 823.777825][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9177'. [ 824.173088][T28344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9182'. [ 824.229577][T28345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9182'. [ 824.295346][T28344] team1: entered promiscuous mode [ 824.304454][T28344] team1: entered allmulticast mode [ 824.322226][T28344] 8021q: adding VLAN 0 to HW filter on device team1 [ 824.446364][T28345] team2: entered promiscuous mode [ 824.460797][T28345] team2: entered allmulticast mode [ 824.481249][T28345] 8021q: adding VLAN 0 to HW filter on device team2 [ 825.484281][T28381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.511844][T28381] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 826.179429][T17502] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 826.350556][T17502] usb 4-1: Using ep0 maxpacket: 16 [ 826.370632][T17502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.385185][T17502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.395932][T17502] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 826.405348][T17502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.427739][T17502] usb 4-1: config 0 descriptor?? [ 826.529686][T28407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.858298][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 826.889484][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 826.919536][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 826.934550][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 826.959988][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 826.990143][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 826.997357][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 827.049331][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 827.077784][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 827.106858][T17502] logitech 0003:046D:C50C.0087: unknown main item tag 0x0 [ 827.132167][T17502] logitech 0003:046D:C50C.0087: item 0 0 0 8 parsing failed [ 827.159777][T17502] logitech 0003:046D:C50C.0087: parse failed [ 827.179454][T17502] logitech 0003:046D:C50C.0087: probe with driver logitech failed with error -22 [ 827.234172][T17502] usb 4-1: USB disconnect, device number 109 [ 828.970014][T27159] usb 9-1: USB disconnect, device number 16 [ 828.987561][T27159] usblp0: removed [ 829.135984][T28481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9237'. [ 829.176528][T28481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9237'. [ 829.303828][ T29] audit: type=1326 audit(1775756533.467:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28488 comm="syz.1.9240" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce1219c819 code=0x0 [ 829.465827][T28496] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9242'. [ 830.049330][T17502] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 830.225460][T17502] usb 10-1: unable to get BOS descriptor or descriptor too short [ 830.242885][T17502] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 830.252379][T27198] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 830.260436][T17502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.268831][T17502] usb 10-1: Product: syz [ 830.274633][T17502] usb 10-1: Manufacturer: syz [ 830.279726][T17502] usb 10-1: SerialNumber: syz [ 830.439458][T27198] usb 4-1: Using ep0 maxpacket: 16 [ 830.448733][T27198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.461185][T27198] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 830.470048][T28523] kvm: pic: non byte write [ 830.477848][T27198] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 830.487339][T27198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.495817][T27198] usb 4-1: Product: syz [ 830.501038][T27198] usb 4-1: Manufacturer: syz [ 830.507497][T27198] usb 4-1: SerialNumber: syz [ 830.669338][T27159] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 830.821878][T27159] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 830.860345][T27159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.880581][T27159] usb 2-1: config 0 descriptor?? [ 831.339410][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 831.500192][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 831.514887][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 831.529810][T17502] usb 10-1: current rate 47898 is different from the runtime rate 48000 [ 831.544942][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 831.545355][T27198] usb 4-1: 0:2 : does not exist [ 831.556961][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.567934][ T24] usb 9-1: Product: syz [ 831.574550][ T24] usb 9-1: Manufacturer: syz [ 831.580503][ T24] usb 9-1: SerialNumber: syz [ 831.593699][T27198] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 831.598441][ T24] usb 9-1: config 0 descriptor?? [ 831.613414][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 831.689564][T27198] usb 4-1: USB disconnect, device number 110 [ 831.769884][T17502] usb 10-1: USB disconnect, device number 9 [ 831.835024][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 831.912794][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.332161][T27159] usb 2-1: Cannot set autoneg [ 832.342247][T27159] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 832.385138][T27159] usb 2-1: USB disconnect, device number 116 [ 832.809331][T17502] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 832.830564][ T24] gspca_zc3xx: reg_w_i err -71 [ 832.972014][T17502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 832.994184][T17502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.006697][T17502] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 833.016424][T17502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.031952][T28579] netlink: 3 bytes leftover after parsing attributes in process `syz.9.9276'. [ 833.043207][T17502] usb 4-1: config 0 descriptor?? [ 833.066619][T17502] hub 4-1:0.0: USB hub found [ 833.275355][T17502] hub 4-1:0.0: 1 port detected [ 833.449271][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 833.455946][ T24] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 833.477846][ T24] usb 9-1: USB disconnect, device number 17 [ 833.645653][T28592] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 833.694857][T28594] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9282'. [ 833.707012][T28594] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9282'. [ 833.716202][T28594] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9282'. [ 834.091742][T17502] hub 4-1:0.0: activate --> -90 [ 834.499970][T17505] usb 4-1: USB disconnect, device number 111 [ 836.591002][ T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 836.781965][T28698] loop2: detected capacity change from 0 to 7 [ 836.801882][T28698] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 836.826591][T28698] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 836.833893][T28698] Dev loop2: unable to read RDB block 7 [ 836.840117][T28698] loop2: unable to read partition table [ 836.847550][ T24] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 836.858282][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.867657][T28698] loop2: partition table beyond EOD, truncated [ 836.874327][ T24] usb 10-1: Product: syz [ 836.878651][ T24] usb 10-1: Manufacturer: syz [ 836.885222][T28698] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 836.902350][ T24] usb 10-1: SerialNumber: syz [ 836.945702][ T24] usb 10-1: config 0 descriptor?? [ 837.211550][ T24] usb 10-1: USB disconnect, device number 10 [ 838.099711][ T24] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 838.261985][ T24] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 838.277741][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 838.302421][ T24] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 838.312816][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.329672][ T24] usb 10-1: Product: syz [ 838.338482][ T24] usb 10-1: Manufacturer: syz [ 838.349018][ T24] usb 10-1: SerialNumber: syz [ 838.367450][ T24] usb 10-1: config 0 descriptor?? [ 838.390974][ T24] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 838.436959][T28741] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 838.626426][T26622] bridge0: port 3(syz_tun) entered disabled state [ 838.654758][T26622] syz_tun (unregistering): left allmulticast mode [ 838.661973][T26622] syz_tun (unregistering): left promiscuous mode [ 838.668835][T26622] bridge0: port 3(syz_tun) entered disabled state [ 839.017880][T19869] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.030264][T19869] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.043624][T19869] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45362 - 0 [ 839.286692][T19869] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.340133][T19869] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.382443][T19869] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45362 - 0 [ 839.437391][T28756] netlink: 'syz.1.9347': attribute type 1 has an invalid length. [ 839.474171][T28756] 8021q: adding VLAN 0 to HW filter on device bond3 [ 839.604117][T19869] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.652369][T19869] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.709569][T19869] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45362 - 0 [ 839.798905][T28756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.853028][T28756] bond3: (slave batadv0): Enslaving as a backup interface with an up link [ 839.871769][ T24] usb 10-1: USB disconnect, device number 11 [ 839.932480][T19863] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 840.017320][T19869] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.058455][T19869] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.089484][T19869] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45362 - 0 [ 840.101176][T19873] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 840.159345][T17505] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 840.319499][T17505] usb 4-1: Using ep0 maxpacket: 16 [ 840.337654][T17505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.390549][T17505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 840.444101][T28774] Invalid argument reading file caps for ./file0 [ 840.444352][T17505] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 840.519322][T17505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.534110][T19869] bridge_slave_1: left allmulticast mode [ 840.535202][T17505] usb 4-1: Product: syz [ 840.554544][T19869] bridge_slave_1: left promiscuous mode [ 840.558763][T17505] usb 4-1: Manufacturer: syz [ 840.565352][T17505] usb 4-1: SerialNumber: syz [ 840.580213][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.590967][T17505] usb 4-1: config 0 descriptor?? [ 840.599363][T19869] bridge_slave_0: left allmulticast mode [ 840.605078][T19869] bridge_slave_0: left promiscuous mode [ 840.626660][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.830251][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 840.856600][T17505] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input129 [ 840.929712][T17505] imon:send_packet: packet tx failed (-71) [ 840.961087][T19869] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 840.979468][T17505] imon 4-1:0.0: panel buttons/knobs setup failed [ 841.043254][T19869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.078911][T19869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.107674][T19869] bond0 (unregistering): Released all slaves [ 841.133738][T19869] bond1 (unregistering): (slave lo): Releasing backup interface [ 841.149574][T17505] rc_core: IR keymap rc-imon-pad not found [ 841.157546][T17505] Registered IR keymap rc-empty [ 841.165751][T19869] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 841.171286][T17505] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 841.202591][T19869] bond1 (unregistering): Released all slaves [ 841.208938][T17505] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 841.228174][T16232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 841.239482][T16232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 841.250587][T16232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 841.262430][T17505] imon:send_packet: packet tx failed (-71) [ 841.268585][T16232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 841.277056][T16232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 841.289508][T17505] imon 4-1:0.0: remote input dev register failed [ 841.296070][T17505] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 841.332035][T19869] bond2 (unregistering): (slave bond3): Releasing backup interface [ 841.348513][T19869] bond3 (unregistering): left promiscuous mode [ 841.361180][T19869] bond2 (unregistering): Released all slaves [ 841.383652][T19869] bond3 (unregistering): Released all slaves [ 841.391031][T17505] imon 4-1:0.0: unable to initialize intf0, err 0 [ 841.397527][T17505] imon:imon_probe: failed to initialize context! [ 841.404592][T17505] imon 4-1:0.0: unable to register, err -19 [ 841.421208][T17505] usb 4-1: USB disconnect, device number 112 [ 841.430748][T28790] netlink: 27 bytes leftover after parsing attributes in process `syz.9.9361'. [ 841.440400][T28777] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9359'. [ 841.780324][T17505] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 841.983984][T17505] usb 4-1: Using ep0 maxpacket: 16 [ 842.044535][T17505] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 842.088378][T17505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 842.152760][T17505] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 842.203999][T17505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.229537][T19869] hsr_slave_0: left promiscuous mode [ 842.234981][T17505] usb 4-1: Product: syz [ 842.235006][T17505] usb 4-1: Manufacturer: syz [ 842.235025][T17505] usb 4-1: SerialNumber: syz [ 842.270411][T17505] usb 4-1: config 0 descriptor?? [ 842.276781][T19869] hsr_slave_1: left promiscuous mode [ 842.290203][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.298273][T19869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.307118][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.316986][T19869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.347820][T19869] veth1_vlan: left promiscuous mode [ 842.353660][T19869] veth0_vlan: left promiscuous mode [ 842.584886][T17505] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input131 [ 842.811536][T19869] team0 (unregistering): Port device team_slave_1 removed [ 842.862960][T19869] team0 (unregistering): Port device team_slave_0 removed [ 842.909296][T17505] rc_core: IR keymap rc-imon-pad not found [ 842.925378][T17505] Registered IR keymap rc-empty [ 842.950945][T17505] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 842.961690][T17505] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 842.994192][T17505] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 843.029600][T17505] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input132 [ 843.056083][T17505] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:113> initialized [ 843.368893][T28787] chnl_net:caif_netlink_parms(): no params data found [ 843.386237][ T5148] Bluetooth: hci1: command tx timeout [ 843.431561][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 843.440461][T17505] usb 4-1: USB disconnect, device number 113 [ 843.812100][T28787] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.861347][T28787] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.868645][T28787] bridge_slave_0: entered allmulticast mode [ 843.901345][T28787] bridge_slave_0: entered promiscuous mode [ 843.914818][T28787] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.938389][T28787] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.967562][T28787] bridge_slave_1: entered allmulticast mode [ 843.999163][T28787] bridge_slave_1: entered promiscuous mode [ 844.135977][T28847] kernel profiling enabled (shift: 0) [ 844.160455][T28787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.224803][T28787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.389359][T28787] team0: Port device team_slave_0 added [ 844.420991][T28787] team0: Port device team_slave_1 added [ 844.566448][T19869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.599832][T19869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.681977][T28787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.699058][T28787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.733906][T28787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.781038][T19869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.798296][T19869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.847880][T28787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.864006][T28787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.928286][T28787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.036321][T19869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.069249][T19869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.205659][T19869] bond0: (slave netdevsim0): Releasing backup interface [ 845.222274][T19869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.249915][T19869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.304776][T28787] hsr_slave_0: entered promiscuous mode [ 845.330732][T28787] hsr_slave_1: entered promiscuous mode [ 845.336962][T28787] debugfs: 'hsr0' already exists in 'hsr' [ 845.355514][T28787] Cannot create hsr debugfs directory [ 845.459317][ T5148] Bluetooth: hci1: command tx timeout [ 845.632226][T16232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 845.653883][T16232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 845.663136][T16232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 845.689574][T16232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 845.699875][T16232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 845.917583][T19869] bridge_slave_1: left allmulticast mode [ 845.930544][T19869] bridge_slave_1: left promiscuous mode [ 845.947112][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.962580][T19869] bridge_slave_0: left allmulticast mode [ 845.979244][T19869] bridge_slave_0: left promiscuous mode [ 845.990208][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.469745][T19869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.484461][T19869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.496278][T19869] bond0 (unregistering): (slave bond1): Releasing backup interface [ 846.507809][T19869] bond0 (unregistering): Released all slaves [ 846.524040][T19869] bond1 (unregistering): Released all slaves [ 846.547310][T19869] bond2 (unregistering): (slave lo): Releasing backup interface [ 846.562128][T19869] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 846.574399][T19869] bond2 (unregistering): Released all slaves [ 846.599636][T19869] bond3 (unregistering): (slave batadv0): Removing an active aggregator [ 846.609863][T19869] bond3 (unregistering): (slave batadv0): Releasing backup interface [ 846.620474][T19869] bond3 (unregistering): Released all slaves [ 846.648643][T28880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9381'. [ 847.069278][T27198] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 847.234055][T27198] usb 4-1: Using ep0 maxpacket: 16 [ 847.256596][T27198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.298273][T27198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.348048][T27198] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 847.384453][T27198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.414991][T28867] chnl_net:caif_netlink_parms(): no params data found [ 847.465047][T27198] usb 4-1: config 0 descriptor?? [ 847.539606][ T5148] Bluetooth: hci1: command tx timeout [ 847.720423][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.749533][T19869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.779821][ T5148] Bluetooth: hci3: command tx timeout [ 847.809522][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.836315][T19869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.847569][T19869] batman_adv: batadv0: Removing interface: ipvlan2 [ 847.890329][T19869] hsr0: left allmulticast mode [ 847.895274][T19869] veth1_macvtap: left promiscuous mode [ 847.915885][T27198] kye 0003:0458:5016.0088: control desc unexpectedly large [ 847.944583][T27198] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0088/input/input133 [ 848.070195][T27198] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0088/input/input134 [ 848.163095][T27198] kye 0003:0458:5016.0088: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 848.413054][T27198] usb 4-1: USB disconnect, device number 114 [ 848.467185][T19869] team0 (unregistering): Port device team_slave_1 removed [ 848.519838][T19869] team0 (unregistering): Port device team_slave_0 removed [ 848.758984][T28867] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.769635][T28867] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.776921][T28867] bridge_slave_0: entered allmulticast mode [ 848.785846][T28867] bridge_slave_0: entered promiscuous mode [ 848.808424][T28867] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.816191][T28867] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.824630][T28867] bridge_slave_1: entered allmulticast mode [ 848.833275][T28867] bridge_slave_1: entered promiscuous mode [ 848.900488][T28867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.958491][T28867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.004572][T28787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 849.041365][T28787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 849.129548][T28926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9391'. [ 849.138480][T28926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9391'. [ 849.161890][T28867] team0: Port device team_slave_0 added [ 849.167555][T28787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 849.221971][T28867] team0: Port device team_slave_1 added [ 849.234787][T28787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 849.371644][T28867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.378681][T28867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.451222][T28867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.504981][T19869] IPVS: stop unused estimator thread 0... [ 849.521779][T28867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.546756][T28867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.546761][T28943] netlink: 'syz.9.9395': attribute type 1 has an invalid length. [ 849.546795][T28867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.618483][T28943] netlink: 'syz.9.9395': attribute type 22 has an invalid length. [ 849.626984][ T5148] Bluetooth: hci1: command tx timeout [ 849.861139][ T5148] Bluetooth: hci3: command tx timeout [ 849.927271][T28867] hsr_slave_0: entered promiscuous mode [ 849.942385][T28958] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.9399'. [ 849.952994][T28867] hsr_slave_1: entered promiscuous mode [ 850.228898][T28787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.368994][T28787] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.403821][T19871] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.411059][T19871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.464451][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.471783][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.925898][T28787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.997128][T28787] veth0_vlan: entered promiscuous mode [ 851.024956][T28787] veth1_vlan: entered promiscuous mode [ 851.165509][T28787] veth0_macvtap: entered promiscuous mode [ 851.194587][T28787] veth1_macvtap: entered promiscuous mode [ 851.257031][T28867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 851.274256][T28867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 851.293072][T28867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 851.321125][T28867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 851.356681][T28787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.374108][T28787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.443419][T19869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.461695][T19869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.494994][T19869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.535497][T19869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.690674][T19863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.723909][T19863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.836244][T19863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.850341][T19863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.940333][ T5148] Bluetooth: hci3: command tx timeout [ 851.983561][T28867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.088677][T28867] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.118704][T19863] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.125934][T19863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.184755][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.192035][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.379279][T27159] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 852.400556][T29040] loop5: detected capacity change from 0 to 7 [ 852.422738][T29040] Dev loop5: unable to read RDB block 7 [ 852.436174][T28867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.447175][T29040] loop5: unable to read partition table [ 852.459837][T29040] loop5: partition table beyond EOD, truncated [ 852.476377][T29040] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 852.584821][T27159] usb 1-1: unable to get BOS descriptor or descriptor too short [ 852.595328][T28867] veth0_vlan: entered promiscuous mode [ 852.615316][T27159] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 852.647627][T27159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.675287][T29046] input: syz1 as /devices/virtual/input/input135 [ 852.696882][T27159] usb 1-1: Product: syz [ 852.713681][T28867] veth1_vlan: entered promiscuous mode [ 852.721369][T27159] usb 1-1: Manufacturer: syz [ 852.745344][T27159] usb 1-1: SerialNumber: syz [ 852.895203][T28867] veth0_macvtap: entered promiscuous mode [ 852.943035][T28867] veth1_macvtap: entered promiscuous mode [ 853.044605][T28867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.113655][T28867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.163953][T19863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.217469][T19863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.265826][T19863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.302133][T19863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.383267][T29060] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9425'. [ 853.475740][T19871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.500011][T19871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.577476][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.593904][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.019568][ T5148] Bluetooth: hci3: command tx timeout [ 854.029059][T27159] usb 1-1: failed to read current rate; disabling the check [ 854.241461][T27159] usb 1-1: USB disconnect, device number 54 [ 854.386836][ T6832] udevd[6832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.129691][ T5843] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 855.310452][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 855.325617][ T5843] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 855.359415][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.377838][ T5843] usb 1-1: Product: syz [ 855.387954][ T5843] usb 1-1: Manufacturer: syz [ 855.402832][ T5843] usb 1-1: SerialNumber: syz [ 855.420687][ T5843] usb 1-1: config 0 descriptor?? [ 855.440866][ T5843] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 855.552091][T29133] netlink: 'syz.3.9443': attribute type 4 has an invalid length. [ 855.575453][T29133] netlink: 'syz.3.9443': attribute type 4 has an invalid length. [ 855.682625][T17502] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 855.859320][T17502] usb 10-1: Using ep0 maxpacket: 16 [ 855.866510][T17502] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 855.882435][T17502] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.896540][T17502] usb 10-1: config 0 has no interface number 0 [ 855.917426][T17502] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 855.941337][T17502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.962940][T17502] usb 10-1: Product: syz [ 855.967249][T17502] usb 10-1: Manufacturer: syz [ 855.980887][T17502] usb 10-1: SerialNumber: syz [ 855.985689][T27159] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 856.004272][T17502] usb 10-1: config 0 descriptor?? [ 856.032454][T17502] uvcvideo 10-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 856.043146][T17502] uvcvideo 10-1:0.105: No valid video chain found. [ 856.179015][T27159] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 856.204439][T27159] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 856.218206][T27159] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 856.242372][T27159] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 856.260476][T27159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.268769][T27159] usb 4-1: Product: syz [ 856.273428][T27198] usb 10-1: USB disconnect, device number 12 [ 856.305522][T27159] usb 4-1: Manufacturer: syz [ 856.319606][T27159] usb 4-1: SerialNumber: syz [ 856.332001][T27159] usb 4-1: config 0 descriptor?? [ 856.338232][T29136] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 856.362142][T29136] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 856.404285][T27159] usb 4-1: ucan: probing device on interface #0 [ 856.679362][ T24] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 856.812310][T27159] usb 4-1: ucan: failed to retrieve device info [ 856.844541][T27159] usb 4-1: ucan: probe failed; try to update the device firmware [ 856.866666][ T5843] gspca_topro: reg_r err -71 [ 856.879441][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 856.892296][T27159] usb 4-1: USB disconnect, device number 115 [ 856.898865][ T5843] gspca_topro: Sensor soi763a [ 856.910761][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 856.939532][ T5843] usb 1-1: USB disconnect, device number 55 [ 856.960863][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 857.005655][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 857.017226][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.033651][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 857.043403][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.276169][ T24] usb 3-1: usb_control_msg returned -32 [ 857.284305][ T24] usbtmc 3-1:16.0: can't read capabilities [ 857.630932][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 857.640416][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 857.649748][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 858.351884][T27198] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 858.530187][T27198] usb 4-1: Using ep0 maxpacket: 32 [ 858.547999][T27198] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 858.579407][T27198] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 858.598862][T27198] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 858.640628][T27198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 858.685306][T27198] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 858.762691][T27198] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 858.815865][T27198] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 858.868945][T27198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.906301][T27198] usb 4-1: config 0 descriptor?? [ 859.136793][T27198] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 116 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 859.218219][T27198] usb 4-1: USB disconnect, device number 116 [ 859.247735][T27198] usblp1: removed [ 859.497751][T17502] usb 3-1: USB disconnect, device number 90 [ 859.709653][T27198] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 859.901783][T27198] usb 4-1: Using ep0 maxpacket: 32 [ 859.960088][T27198] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 859.995530][T27198] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 860.026346][T27198] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 860.072810][T27198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 860.108284][T27198] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 860.147176][T27198] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 860.221100][T17502] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 860.230201][T27198] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 860.239874][T29257] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9474'. [ 860.248775][T29257] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9474'. [ 860.278976][T27198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.323283][T27198] usb 4-1: config 0 descriptor?? [ 860.443023][T17502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.469656][T17502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.498930][T17502] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 860.527830][T17502] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 860.567262][T17502] usb 3-1: Manufacturer: syz [ 860.588177][T17502] usb 3-1: config 0 descriptor?? [ 860.625073][T27198] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 860.789255][ T24] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 860.852223][ T5843] usb 4-1: USB disconnect, device number 117 [ 860.880903][ T5843] usblp0: removed [ 860.979791][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 860.990669][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 860.998993][ T24] usb 10-1: config 0 has no interface number 0 [ 861.008282][ T24] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 861.017841][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.028175][ T24] usb 10-1: Product: syz [ 861.032617][ T24] usb 10-1: Manufacturer: syz [ 861.037406][ T24] usb 10-1: SerialNumber: syz [ 861.051089][ T24] usb 10-1: config 0 descriptor?? [ 861.076095][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 861.264040][T29279] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9478'. [ 861.572128][T29293] xt_hashlimit: size too large, truncated to 1048576 [ 861.699493][T17502] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0089/input/input136 [ 861.726565][T17502] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0089/input/input137 [ 861.782324][T17502] uclogic 0003:256C:006D.0089: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 861.880173][T17503] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 861.969721][T27159] usb 3-1: USB disconnect, device number 91 [ 862.079751][ T24] gspca_spca1528: reg_w err -71 [ 862.097133][ T24] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 862.105994][T17503] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 862.127910][T29303] fido_id[29303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 862.151148][T17503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.174849][ T24] usb 10-1: USB disconnect, device number 13 [ 862.189545][T17503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.226063][T17503] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 862.292687][T17503] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 862.320884][T17503] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 862.357608][T17503] usb 1-1: Manufacturer: syz [ 862.387564][T17503] usb 1-1: config 0 descriptor?? [ 862.841471][T17503] hid_parser_main: 133 callbacks suppressed [ 862.841498][T17503] appleir 0003:05AC:8243.008A: unknown main item tag 0x0 [ 862.904759][T17503] appleir 0003:05AC:8243.008A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 863.107369][T17502] usb 1-1: USB disconnect, device number 56 [ 863.275538][T29327] fido_id[29327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 863.454728][T29336] netlink: 'syz.2.9491': attribute type 1 has an invalid length. [ 863.540800][T29338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9491'. [ 863.579509][T29338] team0: Port device team_slave_0 removed [ 863.977247][T29323] netlink: 45 bytes leftover after parsing attributes in process `syz.9.9487'. [ 864.016051][T29323] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9487'. [ 864.557713][T29378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9502'. [ 864.581044][T29378] netlink: 'syz.0.9502': attribute type 12 has an invalid length. [ 864.635593][T29378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9502'. [ 864.645084][T19869] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.673252][T19869] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.696794][T29378] netlink: 'syz.0.9502': attribute type 12 has an invalid length. [ 864.705368][T19869] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.722998][T19871] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.686350][ T29] audit: type=1326 audit(1775756569.847:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29393 comm="syz.2.9507" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc43299c819 code=0x0 [ 866.450578][T17503] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 866.639666][T17503] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.699302][T17503] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.743556][T17503] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 866.806970][T17503] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.839488][T17503] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.868941][T17503] usb 10-1: config 0 descriptor?? [ 866.991273][T29453] sctp: [Deprecated]: syz.2.9525 (pid 29453) Use of int in max_burst socket option. [ 866.991273][T29453] Use struct sctp_assoc_value instead [ 867.227262][T29465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.365146][T29470] KVM: debugfs: duplicate directory 29470-4 [ 867.391796][T17503] plantronics 0003:047F:FFFF.008B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 867.664370][T27159] usb 10-1: USB disconnect, device number 14 [ 867.743031][T29472] fido_id[29472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 868.054622][ T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 868.107001][T29495] syzkaller0: entered promiscuous mode [ 868.112725][T29495] syzkaller0: entered allmulticast mode [ 868.126431][T29495] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 868.231912][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.270756][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.322085][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.339805][ T24] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 868.359450][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.381226][ T24] usb 1-1: config 0 descriptor?? [ 868.814178][ T24] hid-rmi 0003:0461:4E72.008C: unknown main item tag 0x2 [ 868.865964][ T24] hid-rmi 0003:0461:4E72.008C: unknown main item tag 0x0 [ 868.896756][ T24] hid-rmi 0003:0461:4E72.008C: unbalanced collection at end of report description [ 868.942626][ T24] hid-rmi 0003:0461:4E72.008C: parse failed [ 868.952212][T17502] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 868.972422][ T24] hid-rmi 0003:0461:4E72.008C: probe with driver hid-rmi failed with error -22 [ 868.990587][T17502] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 869.051343][ T24] usb 1-1: USB disconnect, device number 57 [ 869.201895][T17503] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 869.371789][T17503] usb 3-1: config 0 has no interfaces? [ 869.383478][T17503] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.398475][T17503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 869.416534][T17503] usb 3-1: SerialNumber: syz [ 869.443009][T17503] usb 3-1: config 0 descriptor?? [ 869.623511][T29537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9550'. [ 869.743544][ T24] usb 3-1: USB disconnect, device number 92 [ 869.991937][T29554] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9555'. [ 870.017740][T29554] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9555'. [ 870.127655][T29557] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9556'. [ 870.149569][T29557] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 870.196814][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.203245][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.341443][T29565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9558'. [ 872.569334][ T1220] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 872.760984][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.809495][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.834771][ T1220] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 872.895753][ T1220] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 872.927750][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.953664][ T1220] usb 1-1: config 0 descriptor?? [ 873.089466][T17503] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 873.182842][T29680] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9592'. [ 873.275749][T17503] usb 4-1: Using ep0 maxpacket: 16 [ 873.295313][T17503] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.326061][T17503] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 873.350439][T17503] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 873.366489][T17503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.395519][T17503] usb 4-1: Product: syz [ 873.405650][T17503] usb 4-1: Manufacturer: syz [ 873.419529][T17503] usb 4-1: SerialNumber: syz [ 873.489745][ T1220] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 873.669408][T17503] usb 4-1: 0:2 : does not exist [ 873.706970][T17503] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 873.928305][T17503] usb 4-1: USB disconnect, device number 118 [ 874.011410][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.161576][T29714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 875.002059][T29752] Failed to get privilege flags for destination (handle=0x0:0x0) [ 875.090354][T29755] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9614'. [ 875.100870][T29755] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9614'. [ 875.570497][T17504] usb 1-1: USB disconnect, device number 58 [ 877.759873][T17504] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 877.942508][T17504] usb 10-1: Using ep0 maxpacket: 16 [ 877.978894][T17504] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.015050][T17504] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.047147][T17504] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 878.059775][T17504] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.085586][T17504] usb 10-1: config 0 descriptor?? [ 878.457298][T29894] loop6: detected capacity change from 0 to 2640 [ 878.474768][T29894] buffer_io_error: 357 callbacks suppressed [ 878.474814][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.495392][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.509040][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.528680][T17504] kye 0003:0458:5016.008F: control desc unexpectedly large [ 878.541007][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.560643][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.582494][T17504] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.008F/input/input139 [ 878.596677][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.615293][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.636625][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.644688][T29894] ldm_validate_partition_table(): Disk read failed. [ 878.666793][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.719488][T17504] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.008F/input/input140 [ 878.750283][T29894] Buffer I/O error on dev loop6, logical block 0, async page read [ 878.769448][T29894] Dev loop6: unable to read RDB block 0 [ 878.793692][T29894] loop6: unable to read partition table [ 878.825493][T29894] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 878.938551][T17504] kye 0003:0458:5016.008F: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.9-1/input0 [ 879.640380][ C0] kye 0003:0458:5016.008F: usb_submit_urb(ctrl) failed: -1 [ 880.310474][T29958] loop5: detected capacity change from 0 to 7 [ 880.332453][T29958] Dev loop5: unable to read RDB block 7 [ 880.338252][T29958] loop5: AHDI p1 p2 p3 [ 880.353462][T29958] loop5: partition table partially beyond EOD, truncated [ 880.391396][ T1220] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 880.400778][T29958] loop5: p1 start 1818582900 is beyond EOD, truncated [ 880.424164][T17504] usb 10-1: USB disconnect, device number 15 [ 880.431628][T29958] loop5: p3 start 335544320 is beyond EOD, truncated [ 880.594147][T29967] netlink: 'syz.9.9665': attribute type 4 has an invalid length. [ 880.603510][ T1220] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 880.632070][T29967] netlink: 'syz.9.9665': attribute type 4 has an invalid length. [ 880.633085][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 880.671605][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 880.698181][ T1220] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 880.730264][ T1220] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 880.762483][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.800028][ T1220] usb 1-1: config 0 descriptor?? [ 880.817640][T29951] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 881.258188][ T1220] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 881.277966][ T1220] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 881.297404][ T1220] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 881.319521][ T1220] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 881.332754][ T1220] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 881.343748][T29993] netlink: 'syz.3.9672': attribute type 10 has an invalid length. [ 881.383424][ T1220] plantronics 0003:047F:FFFF.0090: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 881.743539][T30002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9674'. [ 881.765777][T30002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9674'. [ 882.118448][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9677'. [ 882.139453][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9677'. [ 882.239339][ T1220] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 882.383390][T30018] xt_hashlimit: size too large, truncated to 1048576 [ 882.461683][ T1220] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.509493][ T1220] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.537756][ T1220] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 882.554017][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.797665][ T1220] usb 4-1: usb_control_msg returned -32 [ 882.819483][ T1220] usbtmc 4-1:16.0: can't read capabilities [ 882.963510][T30039] netlink: 'syz.2.9687': attribute type 1 has an invalid length. [ 883.004680][T30039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 883.032689][T30039] bond1: (slave gretap1): making interface the new active one [ 883.043321][T30039] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 883.393414][T27198] usb 1-1: USB disconnect, device number 59 [ 884.064738][T30091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9702'. [ 884.846122][T30125] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9712'. [ 885.027265][ T5900] usb 4-1: USB disconnect, device number 119 [ 885.531968][ T29] audit: type=1326 audit(1775756589.687:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.3.9725" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc4739c819 code=0x0 [ 885.751542][ T29] audit: type=1326 audit(1775756589.907:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30164 comm="syz.0.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf8b9c819 code=0x7ffc0000 [ 885.849868][ T29] audit: type=1326 audit(1775756589.907:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30164 comm="syz.0.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf8b9c819 code=0x7ffc0000 [ 885.932100][ T29] audit: type=1326 audit(1775756589.907:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30164 comm="syz.0.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf8b9c819 code=0x7ffc0000 [ 886.008126][ T29] audit: type=1326 audit(1775756589.907:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30164 comm="syz.0.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf8b9c819 code=0x7ffc0000 [ 886.124390][ T29] audit: type=1326 audit(1775756589.907:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30164 comm="syz.0.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efcf8b9c819 code=0x7ffc0000 [ 886.248287][ T29] audit: type=1326 audit(1775756589.967:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30164 comm="syz.0.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efcf8b5d04e code=0x7ffc0000 [ 886.347411][ T29] audit: type=1326 audit(1775756589.977:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30164 comm="syz.0.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efcf8b5d04e code=0x7ffc0000 [ 886.404866][ T29] audit: type=1326 audit(1775756589.987:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30164 comm="syz.0.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efcf8b5d04e code=0x7ffc0000 [ 886.519801][ T29] audit: type=1326 audit(1775756589.997:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30164 comm="syz.0.9728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efcf8b5d04e code=0x7ffc0000 [ 887.228398][T30212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9746'. [ 887.530931][T30230] loop2: detected capacity change from 0 to 7 [ 887.580300][T30230] Dev loop2: unable to read RDB block 7 [ 887.590489][T30230] loop2: unable to read partition table [ 887.613457][T30230] loop2: partition table beyond EOD, truncated [ 887.625729][T16232] Bluetooth: hci2: command 0x0406 tx timeout [ 887.638008][T30230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 888.041508][T30244] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9756'. [ 888.239837][T17500] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 888.423532][T17500] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 888.449447][T17500] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 888.472907][T17500] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 888.491383][T17500] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.500104][T17500] usb 3-1: Product: syz [ 888.504310][T17500] usb 3-1: Manufacturer: syz [ 888.508942][T17500] usb 3-1: SerialNumber: syz [ 888.537066][T17500] rtl8150 3-1:1.0: couldn't find required endpoints [ 888.546187][T17500] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 888.640012][T30259] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1110260093 (4441040372 ns) > initial count (1585815008 ns). Using initial count to start timer. [ 888.815867][T30269] netlink: 'syz.9.9763': attribute type 10 has an invalid length. [ 888.866036][T30269] team0: Port device dummy0 added [ 888.876480][T30272] netlink: 'syz.9.9763': attribute type 10 has an invalid length. [ 888.896282][T30272] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 888.922644][T30272] team0: Port device dummy0 removed [ 888.946118][T30272] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 888.950847][T17500] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 889.130738][T17500] usb 4-1: Using ep0 maxpacket: 32 [ 889.139699][T17500] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 889.148149][T17500] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 889.169244][T17500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 889.189252][T17500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 889.198975][T17500] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 889.228473][T17500] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 889.247598][T17500] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 889.260398][T17500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.272297][T17500] usb 4-1: config 0 descriptor?? [ 889.483417][ T5900] IPVS: starting estimator thread 0... [ 889.516277][T17500] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 120 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 889.562761][T17500] usb 4-1: USB disconnect, device number 120 [ 889.589618][T30295] IPVS: using max 31 ests per chain, 74400 per kthread [ 889.594078][T17500] usblp0: removed [ 889.601445][T30299] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9775'. [ 890.039446][T17500] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 890.220724][T17500] usb 4-1: Using ep0 maxpacket: 32 [ 890.229361][T17500] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 890.248746][T17500] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 890.257755][T17500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 890.267821][T17500] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 890.282126][T17500] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 890.292429][T17500] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 890.306426][T17500] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 890.317520][T17500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.331934][T17500] usb 4-1: config 0 descriptor?? [ 890.429373][T17503] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 890.499913][ T1220] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 890.542513][T17500] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 121 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 890.581232][T17503] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 890.590193][T17503] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 890.601503][T17503] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 890.611702][T17503] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 890.624959][T17503] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 890.638019][T17503] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 890.647335][T17503] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 890.656287][T17503] usb 10-1: Product: syz [ 890.663119][T17503] usb 10-1: Manufacturer: syz [ 890.672730][ T1220] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 890.684203][ T1220] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 890.690782][T17503] cdc_wdm 10-1:1.0: skipping garbage [ 890.697063][ T1220] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 890.703899][T17503] cdc_wdm 10-1:1.0: skipping garbage [ 890.711716][ T1220] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 890.718291][ T1220] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 890.741122][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 890.742288][T17503] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 890.756419][T17503] cdc_wdm 10-1:1.0: Unknown control protocol [ 890.757982][ T1220] usb 1-1: Product: syz [ 890.767019][ T1220] usb 1-1: SerialNumber: syz [ 890.780391][T30322] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 890.941133][T17503] usb 3-1: USB disconnect, device number 93 [ 891.008608][T30322] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 891.017656][T30322] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 891.031340][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9783'. [ 891.646080][T30322] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 891.654591][T30322] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 891.718032][T30339] netlink: 988 bytes leftover after parsing attributes in process `syz.2.9789'. [ 891.870702][ T1220] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 891.877279][ T1220] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 891.888434][ T1220] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 891.966484][ T5900] usb 4-1: USB disconnect, device number 121 [ 892.008385][ T5900] usblp0: removed [ 892.083281][ T1220] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 892.115775][ T1220] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 892.336650][T27198] usb 1-1: USB disconnect, device number 60 [ 892.353479][T27198] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 893.202945][T14111] usb 10-1: USB disconnect, device number 16 [ 893.932246][T30410] dlm: non-version read from control device 8 [ 893.953797][T30410] dlm: non-version read from control device 8 [ 893.990542][T30410] dlm: non-version read from control device 8 [ 894.029952][T30410] dlm: non-version read from control device 8 [ 894.538193][T30432] loop5: detected capacity change from 0 to 16384 [ 894.586354][ T5843] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 894.744658][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.776906][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.809802][ T5843] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 894.846193][ T5843] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 894.858936][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.879049][ T5843] usb 1-1: config 0 descriptor?? [ 895.364959][ T5843] plantronics 0003:047F:FFFF.0091: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 896.185397][T30479] netlink: 'syz.2.9829': attribute type 9 has an invalid length. [ 896.206679][T30479] netlink: 'syz.2.9829': attribute type 11 has an invalid length. [ 896.234475][T30479] netlink: 'syz.2.9829': attribute type 12 has an invalid length. [ 896.266835][T30479] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.9829'. [ 896.280191][T30479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9829'. [ 897.454632][T14111] usb 1-1: USB disconnect, device number 61 [ 897.860828][ T5148] Bluetooth: hci4: command 0x0406 tx timeout [ 898.855713][T19869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.887930][T19869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.068747][T19869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.084673][T19869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.241308][T19869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.254487][T19869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.566099][T19869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.566618][T30589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.609922][T19869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.673198][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 899.685712][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 899.696895][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 899.715955][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 899.723889][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 900.150306][ T5900] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 900.222568][T30612] netlink: 'syz.3.9867': attribute type 1 has an invalid length. [ 900.232711][T30612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9867'. [ 900.265947][T19869] bridge_slave_1: left allmulticast mode [ 900.273400][T19869] bridge_slave_1: left promiscuous mode [ 900.285027][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.295774][T19869] bridge_slave_0: left allmulticast mode [ 900.302379][T19869] bridge_slave_0: left promiscuous mode [ 900.308318][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.329622][ T5900] usb 10-1: Using ep0 maxpacket: 16 [ 900.346392][ T5900] usb 10-1: unable to get BOS descriptor or descriptor too short [ 900.356127][ T5900] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 900.371600][ T5900] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 900.385080][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.393907][ T5900] usb 10-1: Product: syz [ 900.398279][ T5900] usb 10-1: Manufacturer: syz [ 900.405427][ T5900] usb 10-1: SerialNumber: syz [ 900.569452][T14108] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 900.625409][ T5900] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 900.635996][ T5900] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 900.656561][T19869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.668493][T19869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.680383][T19869] bond0 (unregistering): Released all slaves [ 900.743940][T14108] usb 4-1: Using ep0 maxpacket: 8 [ 900.778497][T14108] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 900.804341][T14108] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 900.831791][T14108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 900.847453][T14108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 900.858979][T14108] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.874768][T14108] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 900.885674][T14108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.043234][ T5900] usb 10-1: 2:1 : bogus bTerminalLink 6 [ 901.067832][T30598] chnl_net:caif_netlink_parms(): no params data found [ 901.121346][T14108] usb 4-1: usb_control_msg returned -32 [ 901.137368][T14108] usbtmc 4-1:16.0: can't read capabilities [ 901.269282][ T1220] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 901.330588][T17500] usb 4-1: USB disconnect, device number 122 [ 901.375610][ T5900] usb 10-1: USB disconnect, device number 17 [ 901.469381][ T1220] usb 3-1: Using ep0 maxpacket: 32 [ 901.480689][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.505326][ T1220] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 901.531689][ T1220] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 901.542384][T19869] hsr_slave_0: left promiscuous mode [ 901.549598][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 901.565721][T19869] hsr_slave_1: left promiscuous mode [ 901.587946][ T1220] usb 3-1: Product: syz [ 901.594031][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.602591][ T1220] usb 3-1: Manufacturer: syz [ 901.608005][ T1220] usb 3-1: SerialNumber: syz [ 901.614118][T19869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.627130][ T1220] usb 3-1: config 0 descriptor?? [ 901.634772][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.644991][T30625] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 901.649746][T19869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.685137][T19869] veth1_macvtap: left promiscuous mode [ 901.691612][T19869] veth0_macvtap: left promiscuous mode [ 901.697204][T19869] veth1_vlan: left promiscuous mode [ 901.703000][T19869] veth0_vlan: left promiscuous mode [ 901.779438][T16232] Bluetooth: hci1: command tx timeout [ 902.248603][T17500] usb 3-1: USB disconnect, device number 94 [ 902.436889][T19869] team0 (unregistering): Port device team_slave_1 removed [ 902.463442][T19869] team0 (unregistering): Port device team_slave_0 removed [ 902.677952][T30598] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.696421][T30598] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.722519][T30598] bridge_slave_0: entered allmulticast mode [ 902.738696][T30598] bridge_slave_0: entered promiscuous mode [ 902.758908][T30598] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.788660][T30598] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.830816][T30598] bridge_slave_1: entered allmulticast mode [ 902.838683][T30598] bridge_slave_1: entered promiscuous mode [ 902.893679][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9872'. [ 902.970828][T30598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.985090][T30598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.141917][T30598] team0: Port device team_slave_0 added [ 903.170346][T30598] team0: Port device team_slave_1 added [ 903.320427][T30598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.373462][T30598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.439741][T30598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.481657][T30598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.522963][T30676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.532028][T30598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.599220][T30598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.773746][T30598] hsr_slave_0: entered promiscuous mode [ 903.811006][T30598] hsr_slave_1: entered promiscuous mode [ 903.817422][T30598] debugfs: 'hsr0' already exists in 'hsr' [ 903.857091][T30598] Cannot create hsr debugfs directory [ 903.869921][T16232] Bluetooth: hci1: command tx timeout [ 904.424532][ T5900] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 904.482662][ T5900] hid-generic 0000:0000:0000.0092: hidraw0: HID v0.00 Device [syz1] on syz0 [ 905.556117][T30739] kvm: apic: phys broadcast and lowest prio [ 905.762502][T30598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 905.822053][T30598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 905.890356][T30598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 905.934340][T30598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 905.952399][T16232] Bluetooth: hci1: command tx timeout [ 906.053593][T30757] syz_tun: entered allmulticast mode [ 906.121961][T30757] syz_tun: left allmulticast mode [ 906.388010][T30778] netlink: 7 bytes leftover after parsing attributes in process `syz.9.9904'. [ 906.437009][T30598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.517031][T30598] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.543034][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.550285][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.595110][T19871] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.602351][T19871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.298318][T30598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.475901][T30598] veth0_vlan: entered promiscuous mode [ 907.517794][T30598] veth1_vlan: entered promiscuous mode [ 907.627867][T30598] veth0_macvtap: entered promiscuous mode [ 907.651937][T30598] veth1_macvtap: entered promiscuous mode [ 907.711251][T30598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.741855][T30598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.798795][T19873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.828418][ T1220] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 907.837212][T19873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.867232][T19873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.901397][T19873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.019503][T16232] Bluetooth: hci1: command tx timeout [ 908.030230][ T1220] usb 3-1: Using ep0 maxpacket: 8 [ 908.048585][ T1220] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 908.073484][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.085680][ T1220] usb 3-1: Product: syz [ 908.090751][ T1220] usb 3-1: Manufacturer: syz [ 908.095531][ T1220] usb 3-1: SerialNumber: syz [ 908.104783][ T1220] usb 3-1: config 0 descriptor?? [ 908.161847][T19869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.180426][T19869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.238404][T19867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.253995][T19867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.320323][ T1220] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 908.382774][T27159] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 908.450942][T30842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9855'. [ 908.565372][T27159] usb 4-1: Using ep0 maxpacket: 8 [ 908.574022][ T1220] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 908.603965][T27159] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 908.620066][ T1220] usb 3-1: USB disconnect, device number 95 [ 908.626160][T27159] usb 4-1: config 179 has no interface number 0 [ 908.648038][T27159] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 908.691223][T27159] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 908.734003][T27159] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 908.767057][T27159] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 908.778975][T27159] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 908.801881][T27159] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 908.829949][T27159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.877146][T30834] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 909.182281][ T1220] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input142 [ 909.505946][ T1220] usb 4-1: USB disconnect, device number 123 [ 909.506010][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 909.520389][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 910.009671][T27159] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 910.056279][T30890] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9938'. [ 910.089653][T30890] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9938'. [ 910.179289][T27159] usb 5-1: Using ep0 maxpacket: 32 [ 910.202704][T27159] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 910.221299][T27159] usb 5-1: config 0 has no interface number 0 [ 910.232941][T27159] usb 5-1: config 0 interface 12 has no altsetting 0 [ 910.251842][T27159] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 910.272338][T27159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.303046][T27159] usb 5-1: Product: syz [ 910.307303][T27159] usb 5-1: Manufacturer: syz [ 910.343047][T27159] usb 5-1: SerialNumber: syz [ 910.365000][T27159] usb 5-1: config 0 descriptor?? [ 911.734863][T30953] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9959'. [ 911.854328][T27159] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 911.872390][T27159] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 911.889293][T27159] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 911.906523][T27159] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 911.906805][T30958] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 911.944889][T27159] usb 5-1: USB disconnect, device number 54 [ 912.434207][T30981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9967'. [ 912.573173][T30987] netlink: 'syz.2.9970': attribute type 29 has an invalid length. [ 912.711249][T27198] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 912.889449][T27198] usb 10-1: Using ep0 maxpacket: 32 [ 912.902290][T27198] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 912.920429][T27198] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 912.946932][T27198] usb 10-1: config 0 interface 0 has no altsetting 0 [ 912.966868][T27198] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 912.993757][T27198] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.019362][T27198] usb 10-1: Product: syz [ 913.033637][T27198] usb 10-1: Manufacturer: syz [ 913.052085][T27198] usb 10-1: SerialNumber: syz [ 913.083406][T27198] usb 10-1: config 0 descriptor?? [ 913.528213][T27198] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 913.785469][T31028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9981'. [ 913.937798][T31028] all: renamed from ip6tnl0 (while UP) [ 914.158110][T27198] usb 10-1: USB disconnect, device number 18 [ 915.268734][T31090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9997'. [ 915.281853][T31090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.419318][T17504] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 915.592701][T17504] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.605400][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10000'. [ 915.633457][T17504] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.639007][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10000'. [ 915.658551][T17504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.670952][T17504] usb 5-1: Product: syz [ 915.675178][T17504] usb 5-1: Manufacturer: syz [ 915.680365][T17504] usb 5-1: SerialNumber: syz [ 916.719106][T17504] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 916.728015][T17504] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 916.779405][T17504] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 917.029262][ T1220] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 917.123582][T17504] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 917.183300][T17504] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 917.208090][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.228094][T17504] usb 5-1: USB disconnect, device number 55 [ 917.245051][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.261244][T17504] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 917.294457][ T1220] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 917.320138][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.363946][ T1220] usb 4-1: config 0 descriptor?? [ 917.537818][T31180] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10017'. [ 917.817655][ T1220] hid (null): report_id 0 is invalid [ 917.867985][ T1220] hid-steam 0003:28DE:1142.0093: report_id 0 is invalid [ 917.885771][T31192] netlink: 'syz.7.10021': attribute type 1 has an invalid length. [ 917.899685][ T1220] hid-steam 0003:28DE:1142.0093: item 0 1 1 8 parsing failed [ 917.911878][ T1220] hid-steam 0003:28DE:1142.0093: steam_probe:parse of hid interface failed [ 917.922130][ T1220] hid-steam 0003:28DE:1142.0093: probe with driver hid-steam failed with error -22 [ 918.358550][ T5900] usb 4-1: USB disconnect, device number 124 [ 919.578320][T31249] sctp: [Deprecated]: syz.7.10036 (pid 31249) Use of int in maxseg socket option. [ 919.578320][T31249] Use struct sctp_assoc_value instead [ 920.019409][T31260] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 920.477670][T31275] xt_hashlimit: size too large, truncated to 1048576 [ 921.250683][T31291] xt_hashlimit: size too large, truncated to 1048576 [ 922.532117][T31325] sch_fq: defrate 7 ignored. [ 923.147086][T31336] binder: 31335:31336 ioctl c0306201 0 returned -14 [ 923.930057][T31360] [ 923.932456][T31360] ===================================================== [ 923.939422][T31360] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 923.946923][T31360] syzkaller #0 Tainted: G L [ 923.952933][T31360] ----------------------------------------------------- [ 923.959891][T31360] syz.2.10067/31360 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 923.967741][T31360] ffff888022f3a2b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 923.976540][T31360] [ 923.976540][T31360] and this task is already holding: [ 923.983932][T31360] ffff88805adfa468 (&tty->flow.lock){....}-{3:3}, at: tty_send_xchar+0x1c5/0x4d0 [ 923.993131][T31360] which would create a new lock dependency: [ 923.999048][T31360] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 924.006858][T31360] [ 924.006858][T31360] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 924.016341][T31360] (kbd_event_lock){..-.}-{3:3} [ 924.016381][T31360] [ 924.016381][T31360] ... which became SOFTIRQ-irq-safe at: [ 924.028993][T31360] lock_acquire+0xf0/0x2e0 [ 924.033562][T31360] _raw_spin_lock+0x2e/0x40 [ 924.038188][T31360] kbd_event+0xd6/0x40d0 [ 924.042620][T31360] input_handle_events_default+0xd4/0x1a0 [ 924.048466][T31360] input_pass_values+0x288/0x890 [ 924.053529][T31360] input_event_dispose+0x330/0x6b0 [ 924.058788][T31360] input_event+0x89/0xe0 [ 924.063159][T31360] rc_keydown+0x62/0x1e0 [ 924.067549][T31360] imon_incoming_packet+0x1ecb/0x31c0 [ 924.073054][T31360] usb_rx_callback_intf0+0xba/0x210 [ 924.078382][T31360] __usb_hcd_giveback_urb+0x376/0x540 [ 924.083888][T31360] dummy_timer+0xbbd/0x4650 [ 924.088516][T31360] __hrtimer_run_queues+0x53a/0xcc0 [ 924.093881][T31360] hrtimer_run_softirq+0x182/0x5a0 [ 924.099231][T31360] handle_softirqs+0x22a/0x870 [ 924.104129][T31360] __irq_exit_rcu+0x5f/0x150 [ 924.108849][T31360] irq_exit_rcu+0x9/0x30 [ 924.113230][T31360] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 924.118998][T31360] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.125119][T31360] lock_acquire+0x20b/0x2e0 [ 924.129784][T31360] schedule+0xb0/0x360 [ 924.133986][T31360] worker_thread+0xc21/0xfc0 [ 924.138685][T31360] kthread+0x388/0x470 [ 924.142878][T31360] ret_from_fork+0x51e/0xb90 [ 924.147590][T31360] ret_from_fork_asm+0x1a/0x30 [ 924.152472][T31360] [ 924.152472][T31360] to a SOFTIRQ-irq-unsafe lock: [ 924.159512][T31360] (tasklist_lock){.+.+}-{3:3} [ 924.159541][T31360] [ 924.159541][T31360] ... which became SOFTIRQ-irq-unsafe at: [ 924.172217][T31360] ... [ 924.172229][T31360] lock_acquire+0xf0/0x2e0 [ 924.179374][T31360] _raw_read_lock+0x36/0x50 [ 924.184012][T31360] __do_wait+0xde/0x740 [ 924.188380][T31360] do_wait+0x1e7/0x540 [ 924.192569][T31360] kernel_wait+0xd6/0x1c0 [ 924.197058][T31360] call_usermodehelper_exec_work+0xbe/0x230 [ 924.203089][T31360] process_scheduled_works+0xb6e/0x18c0 [ 924.208770][T31360] worker_thread+0xa53/0xfc0 [ 924.213487][T31360] kthread+0x388/0x470 [ 924.217715][T31360] ret_from_fork+0x51e/0xb90 [ 924.222429][T31360] ret_from_fork_asm+0x1a/0x30 [ 924.227316][T31360] [ 924.227316][T31360] other info that might help us debug this: [ 924.227316][T31360] [ 924.237579][T31360] Chain exists of: [ 924.237579][T31360] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 924.237579][T31360] [ 924.250409][T31360] Possible interrupt unsafe locking scenario: [ 924.250409][T31360] [ 924.258757][T31360] CPU0 CPU1 [ 924.264155][T31360] ---- ---- [ 924.269541][T31360] lock(tasklist_lock); [ 924.273825][T31360] local_irq_disable(); [ 924.280691][T31360] lock(kbd_event_lock); [ 924.287570][T31360] lock(&tty->flow.lock); [ 924.294548][T31360] [ 924.298023][T31360] lock(kbd_event_lock); [ 924.302552][T31360] [ 924.302552][T31360] *** DEADLOCK *** [ 924.302552][T31360] [ 924.310719][T31360] 6 locks held by syz.2.10067/31360: [ 924.316016][T31360] #0: ffff88805adfa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 924.325805][T31360] #1: ffff88805adfa130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: tty_send_xchar+0x268/0x4d0 [ 924.336114][T31360] #2: ffff88805adfa2e8 (&tty->termios_rwsem){++++}-{4:4}, at: tty_send_xchar+0x1af/0x4d0 [ 924.346105][T31360] #3: ffff88805adfa468 (&tty->flow.lock){....}-{3:3}, at: tty_send_xchar+0x1c5/0x4d0 [ 924.355833][T31360] #4: ffff88805adfa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 924.365209][T31360] #5: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 924.374314][T31360] [ 924.374314][T31360] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 924.384748][T31360] -> (kbd_event_lock){..-.}-{3:3} { [ 924.390089][T31360] IN-SOFTIRQ-W at: [ 924.394178][T31360] lock_acquire+0xf0/0x2e0 [ 924.400449][T31360] _raw_spin_lock+0x2e/0x40 [ 924.406798][T31360] kbd_event+0xd6/0x40d0 [ 924.412902][T31360] input_handle_events_default+0xd4/0x1a0 [ 924.420489][T31360] input_pass_values+0x288/0x890 [ 924.427294][T31360] input_event_dispose+0x330/0x6b0 [ 924.434281][T31360] input_event+0x89/0xe0 [ 924.440406][T31360] rc_keydown+0x62/0x1e0 [ 924.446510][T31360] imon_incoming_packet+0x1ecb/0x31c0 [ 924.453745][T31360] usb_rx_callback_intf0+0xba/0x210 [ 924.460804][T31360] __usb_hcd_giveback_urb+0x376/0x540 [ 924.468059][T31360] dummy_timer+0xbbd/0x4650 [ 924.474432][T31360] __hrtimer_run_queues+0x53a/0xcc0 [ 924.481498][T31360] hrtimer_run_softirq+0x182/0x5a0 [ 924.488478][T31360] handle_softirqs+0x22a/0x870 [ 924.495104][T31360] __irq_exit_rcu+0x5f/0x150 [ 924.501606][T31360] irq_exit_rcu+0x9/0x30 [ 924.507880][T31360] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 924.515473][T31360] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.523310][T31360] lock_acquire+0x20b/0x2e0 [ 924.529669][T31360] schedule+0xb0/0x360 [ 924.535590][T31360] worker_thread+0xc21/0xfc0 [ 924.542030][T31360] kthread+0x388/0x470 [ 924.547935][T31360] ret_from_fork+0x51e/0xb90 [ 924.554423][T31360] ret_from_fork_asm+0x1a/0x30 [ 924.561047][T31360] INITIAL USE at: [ 924.565050][T31360] lock_acquire+0xf0/0x2e0 [ 924.571232][T31360] _raw_spin_lock_irqsave+0x40/0x60 [ 924.578186][T31360] vt_reset_unicode+0x2b/0x1a0 [ 924.584795][T31360] reset_vc+0x68/0x1b0 [ 924.590653][T31360] vc_init+0x70/0x4a0 [ 924.596419][T31360] con_init+0x377/0x6a0 [ 924.602350][T31360] console_init+0x10b/0x4d0 [ 924.608611][T31360] start_kernel+0x22b/0x3d0 [ 924.614868][T31360] x86_64_start_reservations+0x24/0x30 [ 924.622091][T31360] x86_64_start_kernel+0x143/0x1c0 [ 924.628974][T31360] common_startup_64+0x13e/0x147 [ 924.635682][T31360] } [ 924.638279][T31360] ... key at: [] kbd_event_lock+0x18/0xa0 [ 924.646194][T31360] -> (&tty->flow.lock){....}-{3:3} { [ 924.651522][T31360] INITIAL USE at: [ 924.655488][T31360] lock_acquire+0xf0/0x2e0 [ 924.661500][T31360] _raw_spin_lock_irqsave+0x40/0x60 [ 924.668280][T31360] start_tty+0x20/0x70 [ 924.673924][T31360] n_tty_set_termios+0xa7c/0x10c0 [ 924.680537][T31360] tty_set_termios+0xdb3/0x1800 [ 924.686998][T31360] set_termios+0x566/0x710 [ 924.692995][T31360] tty_mode_ioctl+0x4a6/0x7d0 [ 924.699264][T31360] tty_ioctl+0x9c5/0xde0 [ 924.705087][T31360] __se_sys_ioctl+0xfc/0x170 [ 924.711289][T31360] do_syscall_64+0x14d/0xf80 [ 924.717486][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.724979][T31360] } [ 924.727493][T31360] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 924.736246][T31360] ... acquired at: [ 924.740074][T31360] _raw_spin_lock_irqsave+0x40/0x60 [ 924.745491][T31360] stop_tty+0x2f/0x150 [ 924.749753][T31360] kbd_event+0x2ec1/0x40d0 [ 924.754366][T31360] input_handle_events_default+0xd4/0x1a0 [ 924.760280][T31360] input_pass_values+0x288/0x890 [ 924.765403][T31360] input_event_dispose+0x330/0x6b0 [ 924.770708][T31360] input_inject_event+0x1dd/0x340 [ 924.775931][T31360] evdev_write+0x325/0x4c0 [ 924.780541][T31360] vfs_write+0x29a/0xb90 [ 924.784987][T31360] ksys_write+0x150/0x270 [ 924.789514][T31360] do_syscall_64+0x14d/0xf80 [ 924.794307][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.800393][T31360] [ 924.802728][T31360] [ 924.802728][T31360] the dependencies between the lock to be acquired [ 924.802738][T31360] and SOFTIRQ-irq-unsafe lock: [ 924.816329][T31360] -> (tasklist_lock){.+.+}-{3:3} { [ 924.821693][T31360] HARDIRQ-ON-R at: [ 924.825866][T31360] lock_acquire+0xf0/0x2e0 [ 924.832310][T31360] _raw_read_lock+0x36/0x50 [ 924.838830][T31360] __do_wait+0xde/0x740 [ 924.844998][T31360] do_wait+0x1e7/0x540 [ 924.851084][T31360] kernel_wait+0xd6/0x1c0 [ 924.857435][T31360] call_usermodehelper_exec_work+0xbe/0x230 [ 924.865355][T31360] process_scheduled_works+0xb6e/0x18c0 [ 924.872922][T31360] worker_thread+0xa53/0xfc0 [ 924.879534][T31360] kthread+0x388/0x470 [ 924.885627][T31360] ret_from_fork+0x51e/0xb90 [ 924.892239][T31360] ret_from_fork_asm+0x1a/0x30 [ 924.899202][T31360] SOFTIRQ-ON-R at: [ 924.903378][T31360] lock_acquire+0xf0/0x2e0 [ 924.909822][T31360] _raw_read_lock+0x36/0x50 [ 924.916342][T31360] __do_wait+0xde/0x740 [ 924.922549][T31360] do_wait+0x1e7/0x540 [ 924.928655][T31360] kernel_wait+0xd6/0x1c0 [ 924.934996][T31360] call_usermodehelper_exec_work+0xbe/0x230 [ 924.942912][T31360] process_scheduled_works+0xb6e/0x18c0 [ 924.950477][T31360] worker_thread+0xa53/0xfc0 [ 924.957090][T31360] kthread+0x388/0x470 [ 924.963174][T31360] ret_from_fork+0x51e/0xb90 [ 924.969789][T31360] ret_from_fork_asm+0x1a/0x30 [ 924.976622][T31360] INITIAL USE at: [ 924.980798][T31360] lock_acquire+0xf0/0x2e0 [ 924.987240][T31360] _raw_write_lock_irq+0x3d/0x50 [ 924.994114][T31360] copy_process+0x247a/0x3cd0 [ 925.000733][T31360] kernel_clone+0x248/0x8e0 [ 925.007173][T31360] user_mode_thread+0x110/0x180 [ 925.013962][T31360] rest_init+0x23/0x300 [ 925.020050][T31360] start_kernel+0x385/0x3d0 [ 925.026479][T31360] x86_64_start_reservations+0x24/0x30 [ 925.033886][T31360] x86_64_start_kernel+0x143/0x1c0 [ 925.040936][T31360] common_startup_64+0x13e/0x147 [ 925.047803][T31360] INITIAL READ USE at: [ 925.052328][T31360] lock_acquire+0xf0/0x2e0 [ 925.059117][T31360] _raw_read_lock+0x36/0x50 [ 925.065997][T31360] __do_wait+0xde/0x740 [ 925.072534][T31360] do_wait+0x1e7/0x540 [ 925.078977][T31360] kernel_wait+0xd6/0x1c0 [ 925.085700][T31360] call_usermodehelper_exec_work+0xbe/0x230 [ 925.093964][T31360] process_scheduled_works+0xb6e/0x18c0 [ 925.101881][T31360] worker_thread+0xa53/0xfc0 [ 925.108837][T31360] kthread+0x388/0x470 [ 925.115266][T31360] ret_from_fork+0x51e/0xb90 [ 925.122227][T31360] ret_from_fork_asm+0x1a/0x30 [ 925.129367][T31360] } [ 925.132057][T31360] ... key at: [] tasklist_lock+0x18/0x40 [ 925.139985][T31360] ... acquired at: [ 925.143979][T31360] _raw_read_lock+0x36/0x50 [ 925.148693][T31360] send_sigurg+0x12b/0x420 [ 925.153305][T31360] sk_send_sigurg+0x6c/0x2e0 [ 925.158109][T31360] tcp_check_urg+0x200/0x760 [ 925.162892][T31360] tcp_urg+0x15d/0x410 [ 925.167164][T31360] tcp_rcv_established+0xf3a/0x2740 [ 925.172563][T31360] tcp_v4_do_rcv+0xa90/0x1430 [ 925.177439][T31360] __release_sock+0x265/0x3a0 [ 925.182316][T31360] release_sock+0x5f/0x1f0 [ 925.186940][T31360] tcp_sendmsg+0x39/0x50 [ 925.191409][T31360] ____sys_sendmsg+0x5c7/0x9f0 [ 925.196407][T31360] ___sys_sendmsg+0x2a5/0x360 [ 925.201284][T31360] __sys_sendmmsg+0x27c/0x4e0 [ 925.206198][T31360] __x64_sys_sendmmsg+0xa0/0xc0 [ 925.211266][T31360] do_syscall_64+0x14d/0xf80 [ 925.216064][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.222155][T31360] [ 925.224506][T31360] -> (&f_owner->lock){....}-{3:3} { [ 925.229846][T31360] INITIAL USE at: [ 925.233867][T31360] lock_acquire+0xf0/0x2e0 [ 925.240053][T31360] _raw_write_lock_irq+0x3d/0x50 [ 925.246754][T31360] __f_setown+0x67/0x370 [ 925.252781][T31360] generic_setlease+0xacf/0xff0 [ 925.259422][T31360] do_fcntl_add_lease+0x35e/0x470 [ 925.266207][T31360] fcntl_setlease+0x123/0x180 [ 925.272728][T31360] do_fcntl+0x8b3/0x1a20 [ 925.278906][T31360] __se_sys_fcntl+0xc8/0x150 [ 925.285262][T31360] do_syscall_64+0x14d/0xf80 [ 925.291703][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.299442][T31360] INITIAL READ USE at: [ 925.303879][T31360] lock_acquire+0xf0/0x2e0 [ 925.310487][T31360] _raw_read_lock_irqsave+0x48/0x60 [ 925.317886][T31360] send_sigio+0x38/0x370 [ 925.324337][T31360] kill_fasync+0x24d/0x4d0 [ 925.330955][T31360] lease_break_callback+0x26/0x30 [ 925.338188][T31360] __break_lease+0x81c/0x1e80 [ 925.345150][T31360] do_dentry_open+0x1010/0x14e0 [ 925.352208][T31360] vfs_open+0x3b/0x340 [ 925.358560][T31360] path_openat+0x2e08/0x3860 [ 925.365341][T31360] do_file_open+0x23e/0x4a0 [ 925.372065][T31360] do_sys_openat2+0x113/0x200 [ 925.378944][T31360] __x64_sys_openat+0x138/0x170 [ 925.385993][T31360] do_syscall_64+0x14d/0xf80 [ 925.392786][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.400875][T31360] } [ 925.403479][T31360] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 925.412435][T31360] ... acquired at: [ 925.416351][T31360] _raw_read_lock_irqsave+0x48/0x60 [ 925.421767][T31360] send_sigio+0x38/0x370 [ 925.426219][T31360] kill_fasync+0x24d/0x4d0 [ 925.430844][T31360] lease_break_callback+0x26/0x30 [ 925.436083][T31360] __break_lease+0x81c/0x1e80 [ 925.440968][T31360] do_dentry_open+0x1010/0x14e0 [ 925.446030][T31360] vfs_open+0x3b/0x340 [ 925.450312][T31360] path_openat+0x2e08/0x3860 [ 925.455100][T31360] do_file_open+0x23e/0x4a0 [ 925.459818][T31360] do_sys_openat2+0x113/0x200 [ 925.464709][T31360] __x64_sys_openat+0x138/0x170 [ 925.469770][T31360] do_syscall_64+0x14d/0xf80 [ 925.474576][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.480661][T31360] [ 925.482999][T31360] -> (&new->fa_lock){....}-{3:3} { [ 925.488150][T31360] INITIAL USE at: [ 925.492057][T31360] lock_acquire+0xf0/0x2e0 [ 925.498060][T31360] _raw_write_lock_irq+0x3d/0x50 [ 925.504596][T31360] fasync_remove_entry+0xf1/0x1c0 [ 925.511204][T31360] lease_modify+0x4f7/0x6c0 [ 925.517297][T31360] locks_remove_file+0x5f0/0xf70 [ 925.523818][T31360] __fput+0x3ae/0xa70 [ 925.529427][T31360] task_work_run+0x1d9/0x270 [ 925.535623][T31360] exit_to_user_mode_loop+0xed/0x480 [ 925.542524][T31360] do_syscall_64+0x32d/0xf80 [ 925.548734][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.556234][T31360] INITIAL READ USE at: [ 925.560613][T31360] lock_acquire+0xf0/0x2e0 [ 925.567061][T31360] _raw_read_lock_irqsave+0x48/0x60 [ 925.574291][T31360] kill_fasync+0x199/0x4d0 [ 925.580731][T31360] lease_break_callback+0x26/0x30 [ 925.587796][T31360] __break_lease+0x81c/0x1e80 [ 925.594507][T31360] do_dentry_open+0x1010/0x14e0 [ 925.601389][T31360] vfs_open+0x3b/0x340 [ 925.607493][T31360] path_openat+0x2e08/0x3860 [ 925.614131][T31360] do_file_open+0x23e/0x4a0 [ 925.620663][T31360] do_sys_openat2+0x113/0x200 [ 925.627373][T31360] __x64_sys_openat+0x138/0x170 [ 925.634247][T31360] do_syscall_64+0x14d/0xf80 [ 925.640875][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.648817][T31360] } [ 925.651354][T31360] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 925.660250][T31360] ... acquired at: [ 925.664088][T31360] _raw_read_lock_irqsave+0x48/0x60 [ 925.669495][T31360] kill_fasync+0x199/0x4d0 [ 925.674110][T31360] __start_tty+0x18c/0x220 [ 925.678718][T31360] tty_send_xchar+0x1d2/0x4d0 [ 925.683600][T31360] tty_ioctl+0x9c5/0xde0 [ 925.688039][T31360] __se_sys_ioctl+0xfc/0x170 [ 925.692839][T31360] do_syscall_64+0x14d/0xf80 [ 925.697630][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.703721][T31360] [ 925.706067][T31360] [ 925.706067][T31360] stack backtrace: [ 925.711978][T31360] CPU: 1 UID: 0 PID: 31360 Comm: syz.2.10067 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.712006][T31360] Tainted: [L]=SOFTLOCKUP [ 925.712013][T31360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 925.712026][T31360] Call Trace: [ 925.712036][T31360] [ 925.712045][T31360] dump_stack_lvl+0xe8/0x150 [ 925.712073][T31360] __lock_acquire+0x2a94/0x2cf0 [ 925.712108][T31360] lock_acquire+0xf0/0x2e0 [ 925.712130][T31360] ? kill_fasync+0x199/0x4d0 [ 925.712153][T31360] ? do_raw_spin_lock+0x12b/0x2f0 [ 925.712173][T31360] _raw_read_lock_irqsave+0x48/0x60 [ 925.712196][T31360] ? kill_fasync+0x199/0x4d0 [ 925.712215][T31360] kill_fasync+0x199/0x4d0 [ 925.712235][T31360] ? kill_fasync+0x53/0x4d0 [ 925.712255][T31360] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 925.712281][T31360] __start_tty+0x18c/0x220 [ 925.712298][T31360] tty_send_xchar+0x1d2/0x4d0 [ 925.712318][T31360] ? __pfx_tty_send_xchar+0x10/0x10 [ 925.712337][T31360] ? n_tty_ioctl_helper+0x343/0x4d0 [ 925.712355][T31360] ? __pfx_n_tty_ioctl+0x10/0x10 [ 925.712379][T31360] tty_ioctl+0x9c5/0xde0 [ 925.712398][T31360] ? __pfx_tty_ioctl+0x10/0x10 [ 925.712417][T31360] __se_sys_ioctl+0xfc/0x170 [ 925.712440][T31360] do_syscall_64+0x14d/0xf80 [ 925.712464][T31360] ? trace_irq_disable+0x3b/0x150 [ 925.712480][T31360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.712500][T31360] ? clear_bhb_loop+0x40/0x90 [ 925.712520][T31360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.712540][T31360] RIP: 0033:0x7fc43299c819 [ 925.712558][T31360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.712575][T31360] RSP: 002b:00007fc4337f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.712597][T31360] RAX: ffffffffffffffda RBX: 00007fc432c16180 RCX: 00007fc43299c819 [ 925.712611][T31360] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 925.712623][T31360] RBP: 00007fc432a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 925.712635][T31360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.712646][T31360] R13: 00007fc432c16218 R14: 00007fc432c16180 R15: 00007fc432d3fa48 [ 925.712666][T31360] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 927.046915][T19869] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.123944][T19869] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.208277][T19869] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.305969][T19869] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.402306][T19869] bridge_slave_1: left allmulticast mode [ 927.408064][T19869] bridge_slave_1: left promiscuous mode [ 927.414962][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.424170][T19869] bridge_slave_0: left allmulticast mode [ 927.430000][T19869] bridge_slave_0: left promiscuous mode [ 927.435676][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.504096][T19869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.515909][T19869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.525520][T19869] bond0 (unregistering): Released all slaves [ 927.731453][T19869] hsr_slave_0: left promiscuous mode [ 927.737352][T19869] hsr_slave_1: left promiscuous mode [ 927.743541][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.751355][T19869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.759120][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.766815][T19869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.779352][T19869] veth1_macvtap: left promiscuous mode [ 927.785542][T19869] veth0_macvtap: left promiscuous mode [ 927.791414][T19869] veth1_vlan: left promiscuous mode [ 927.796713][T19869] veth0_vlan: left promiscuous mode [ 927.941805][T19869] team0 (unregistering): Port device team_slave_1 removed [ 927.957605][T19869] team0 (unregistering): Port device team_slave_0 removed [ 928.378195][T19869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.429488][T19869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.487921][T19869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.526373][T19869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.640413][T19869] bridge_slave_1: left allmulticast mode [ 928.646122][T19869] bridge_slave_1: left promiscuous mode [ 928.654704][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.665594][T19869] bridge_slave_0: left allmulticast mode [ 928.671472][T19869] bridge_slave_0: left promiscuous mode [ 928.677185][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.743781][T19869] bond1 (unregistering): (slave gretap1): Releasing active interface [ 928.844495][T19869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.854824][T19869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.864500][T19869] bond0 (unregistering): Released all slaves [ 928.872838][T19869] bond1 (unregistering): Released all slaves [ 929.073241][T19869] hsr_slave_0: left promiscuous mode [ 929.079750][T19869] hsr_slave_1: left promiscuous mode [ 929.085571][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.093109][T19869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.104884][T19869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.112622][T19869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.123887][T19869] veth1_macvtap: left promiscuous mode [ 929.130402][T19869] veth0_macvtap: left promiscuous mode [ 929.135960][T19869] veth1_vlan: left promiscuous mode [ 929.141806][T19869] veth0_vlan: left promiscuous mode [ 929.308024][T19869] team0 (unregistering): Port device team_slave_1 removed [ 931.621372][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.627705][ T1301] ieee802154 phy1 wpan1: encryption failed: -22